CVE-2019-14260

On the Alcatel-Lucent Enterprise ALE 8008 Cloud Edition Deskphone VoIP phone with firmware 1.50.13, a command injection missing input validation issue in the password change field for the Change Password interface allows an authenticated remote attacker in the same network to trigger OS commands...

CVE-2019-14260

CVE-2019-14260 affects the Alcatel-Lucent Enterprise (ALE) 8008 Cloud Edition Deskphone VoIP, firmware 1.50.13. The vulnerability is a command injection in the Change Password interface’s password-change field, allowing an authenticated remote attacker on the same network to trigger OS commands v...