CVE-2024-29149

2024-05-0700:00:00

mitre

www.cve.org

alcatel-lucent

deskphones

firmware replacement

time-of-check time-of-use

authenticated attacker

vulnerability

update process

AI Score

6.7

Confidence

Low

EPSS

Percentile

9.0%

JSON

An issue was discovered in Alcatel-Lucent ALE NOE deskphones through 86x8_NOE-R300.1.40.12.4180 and SIP deskphones through 86x8_SIP-R200.1.01.10.728. Because of a time-of-check time-of-use vulnerability, an authenticated attacker is able to replace the verified firmware image with malicious firmware during the update process.