CVE-2019-3921

HIGH

Nokia I-240w-q Gpon Ont Firmware - Out-of-Bounds Write

Title source: rule
STIX 2.1

Description

The Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 is vulnerable to a stack buffer overflow via crafted HTTP POST request sent by a remote, authenticated attacker to /GponForm/usb_Form?script/. An attacker can leverage this vulnerability to potentially execute arbitrary code.

Exploits (1)

exploitdb WORKING POC
by Artem Metla · pythonremotehardware
https://www.exploit-db.com/exploits/46469

References (2)

Scores

CVSS v3 8.8
EPSS 0.0549
EPSS Percentile 90.2%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-121 CWE-787
Status published
Products (1)
nokia/i-240w-q_gpon_ont_firmware 3fe54567bozj19
Published Mar 05, 2019
Tracked Since Feb 18, 2026