371 matches found
CVE-2019-3918
The Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 contains multiple hard coded credentials for the Telnet and SSH interfaces...
CVE-2019-3919
The Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 is vulnerable to command injection via crafted HTTP request sent by a remote, authenticated attacker to /GponForm/usbrestoreForm?script/...
CVE-2019-3920
CVE-2019-3920 affects Alcatel Lucent I-240W-Q GPON ONT with firmware 3FE54567BOZJ19. The vulnerability is an authenticated command-injection flaw exploitable by a remote, authenticated attacker sending a crafted HTTP request to /GponForm/device_Form?script/. The core impact is authenticated remot...
CVE-2019-3921
The CVE-2019-3921 vulnerability affects the Alcatel-Lucent I-240W-Q GPON ONT running firmware 3FE54567BOZJ19. A stack buffer overflow can be triggered by a crafted HTTP POST to /GponForm/usb_Form?script/, allowing a remote, authenticated attacker to potentially execute arbitrary code. The availab...
CVE-2019-3919
The CVE-2019-3919 entry concerns the Alcatel Lucent I-240W-Q GPON ONT with firmware 3FE54567BOZJ19, vulnerable to command injection via a crafted HTTP request to /GponForm/usb_restore_Form?script/. The issue is exploitable by a remote, authenticated attacker and affects the targeted firmware as d...
CVE-2019-3922
The CVE-2019-3922 entry involves the Alcatel Lucent I-240W-Q GPON ONT with firmware 3FE54567BOZJ19, vulnerable to a stack buffer overflow triggered by a crafted HTTP POST to /GponForm/fsetup_Form. The vulnerability is exploitable remotely and unauthenticated, potentially allowing arbitrary code e...
PT-2019-16773 · Alcatel Lucent · Alcatel Lucent I-240W-Q Gpon Ont
Name of the Vulnerable Software and Affected Versions: Alcatel Lucent I-240W-Q GPON ONT version 3FE54567BOZJ19 Description: The issue concerns the presence of multiple hard-coded credentials for the Telnet and SSH interfaces in the affected device. This could potentially allow unauthorized access...
Alcatel-Lucent (Nokia) GPON I-240W-Q - Buffer Overflow
Alcatel-Lucent Nokia GPON I-240W-Q - Buffer Overflow !/usr/bin/python3 import argparse import requests import urllib.parse import binascii import re def runtarget: """ Execute exploitation """ We're using CVE-2018-10561 and/or it's extension in order to exploit this Authenticated RCE in usbForm...
Alcatel-Lucent (Nokia) GPON I-240W-Q - Buffer Overflow
!/usr/bin/python3 import argparse import requests import urllib.parse import binascii import re def runtarget: """ Execute exploitation """ We're using CVE-2018-10561 and/or it's extension in order to exploit this Authenticated RCE in usbForm method of GPON ONT. We can also exploit this issue aft...
Raisecom Technology GPON-ONU HT803G-07 Command Injection Vulnerability
Raisecom Technology is a supplier of access equipment, solutions and services. A command injection vulnerability exists in the 'fmgponloid' parameter in the Raisecom Technology GPON-ONU HT803G-07. An attacker could exploit this vulnerability to execute code...
Raisecom Technology GPON-ONU HT803G-07 Command Injection
===================================== Authenticated Shell Command Injection ===================================== . contents:: Table Of Content Overview ======== Title:- Authenticated Shell command Injection Author: Kaustubh G. Padwad CVE ID: CVE-2019-7384. Vendor: Raisecom technology co.,LTD...
Raisecom Technology GPON-ONU HT803G-07 Command Injection
===================================== Authenticated Shell Command Injection ===================================== . contents:: Table Of Content Overview ======== Title:- Authenticated Shell command Injection Author: Kaustubh G. Padwad Vendor: Raisecom technology co.,LTD Product: GPON-ONU HT803G-0...
Raisecom Technology GPON-ONU HT803G-07 Command Injection (1)
Raisecom Technology GPON-ONU HT803G-07 suffers from an authenticated command injection vulnerability in the fmgponloid parameter. Raisecom Technology GPON-ONU HT803G-07 Command Injection 1 ===================================== Authenticated Shell Command Injection...
Raisecom Technology GPON-ONU HT803G-07 Command Injection (2)
Raisecom Technology GPON-ONU HT803G-07 suffers from an authenticated command injection vulnerability in the newpass and confpass parameters in /bin/WebMGR. Raisecom Technology GPON-ONU HT803G-07 Command Injection 2 ===================================== Authenticated Shell Command Injection...
Skyworth GPON HomeGateways and Optical Network Terminals - Stack Overflow
Skyworth GPON HomeGateways and Optical Network Terminals - Stack Overflow ''' ======================================================== Unauthenticated Stack Overflow in Multiple Gpon Devices ======================================================== . contents:: Table Of Content Overview ========...
Skyworth GPON HomeGateways and Optical Network Terminals - Stack Overflow Exploit
''' ======================================================== Unauthenticated Stack Overflow in Multiple Gpon Devices ======================================================== . contents:: Table Of Content Overview ======== Title:- StackOverflow in Multiple Skyworth GPON HomeGateways and Optical...
Skyworth GPON HomeGateways and Optical Network Terminals - Stack Overflow
''' ======================================================== Unauthenticated Stack Overflow in Multiple Gpon Devices ======================================================== . contents:: Table Of Content Overview ======== Title:- StackOverflow in Multiple Skyworth GPON HomeGateways and Optical...
Skyworth GPON HomeGateways / Optical Network Stack Overflow
======================================================== Unauthenticated Stack Overflow in Multiple Gpon Devices ======================================================== . contents:: Table Of Content Overview ======== Title:- StackOverflow in Multiple Skyworth GPON HomeGateways and Optical Networ...
