CVE-2019-3919: OS Command Injection
The Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 is vulnerable to command injection via crafted HTTP request sent by a remote, authenticated attacker to /GponForm/usbrestoreForm?script/.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-3919?
CVE-2019-3919 is rated as a high severity vulnerability due to its potential for remote command injection.
How do I fix CVE-2019-3919?
To fix CVE-2019-3919, upgrade the Alcatel Lucent I-240W-Q GPON ONT firmware to a version that is not affected by this vulnerability.
What causes CVE-2019-3919?
CVE-2019-3919 is caused by a vulnerability in the firmware that allows unauthorized command execution via crafted HTTP requests.
Who is affected by CVE-2019-3919?
CVE-2019-3919 affects users of the Alcatel Lucent I-240W-Q GPON ONT running firmware version 3FE54567BOZJ19.
Can CVE-2019-3919 be exploited remotely?
Yes, CVE-2019-3919 can be exploited remotely by an authenticated attacker through malicious HTTP requests.