Approved changes feed: RSS · Atom

cpe:2.3:o:nokia:i-240w-q_gpon_ont_firmware:3fe54567bozj19:*:*:*:*:*:*:*

part: o version: 3fe54567bozj19 update: *

VendorNokia (817976ae-06c5-5680-b3fe-e55f44d8308a)
ProductI 240W Q Gpon Ont Firmware (28cd6711-ec0f-5ec4-9a9b-37fed912fe7b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-3922 vulnerable 2026-06-08 05:13:56.424812 Details available
The Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 is vulnerable to a stack buffer overflow via crafted HTTP POST request sent by a remote, unauthenticated attacker to /GponForm/fsetup_Form. An attacker can leverage this vulnerability to potentially execute arbitrary code.
Published: 2019-03-05T21:00:00.000Z
Updated: 2024-09-16T17:07:38.284Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-3921 vulnerable 2026-06-08 05:13:56.424395 Details available
The Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 is vulnerable to a stack buffer overflow via crafted HTTP POST request sent by a remote, authenticated attacker to /GponForm/usb_Form?script/. An attacker can leverage this vulnerability to potentially execute arbitrary code.
Published: 2019-03-05T21:00:00.000Z
Updated: 2024-09-17T04:19:39.718Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-3920 vulnerable 2026-06-08 05:13:56.423918 Details available
The Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 is vulnerable to authenticated command injection via crafted HTTP request sent by a remote, authenticated attacker to /GponForm/device_Form?script/.
Published: 2019-03-05T21:00:00.000Z
Updated: 2024-09-17T02:32:47.046Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-3919 vulnerable 2026-06-08 05:13:56.423474 Details available
The Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 is vulnerable to command injection via crafted HTTP request sent by a remote, authenticated attacker to /GponForm/usb_restore_Form?script/.
Published: 2019-03-05T21:00:00.000Z
Updated: 2024-09-16T22:51:22.049Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-3918 vulnerable 2026-06-08 05:13:56.423132 Details available
The Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 contains multiple hard coded credentials for the Telnet and SSH interfaces.
Published: 2019-03-05T21:00:00.000Z
Updated: 2024-09-16T22:25:15.845Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-3917 vulnerable 2026-06-08 05:13:56.422159 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.