Vulnerabilities > Alcatel > Medium

DATE CVE VULNERABILITY TITLE RISK
2007-10-12 CVE-2007-5385 Cross-Site Scripting vulnerability in multiple products
Multiple cross-site scripting (XSS) vulnerabilities in the Thomson/Alcatel SpeedTouch 7G router, as used for the BT Home Hub 6.2.6.B and earlier, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
network
alcatel bt CWE-79
4.3
2007-10-12 CVE-2007-5384 Cross-Site Request Forgery (CSRF) vulnerability in multiple products
Multiple cross-site request forgery (CSRF) vulnerabilities in the Thomson/Alcatel SpeedTouch 7G router, as used for the BT Home Hub 6.2.6.B and earlier, allow remote attackers to perform actions as administrators via unspecified POST requests, as demonstrated by enabling an inbound remote-assistance HTTPS session on TCP port 51003.
network
alcatel bt CWE-352
4.3
2004-12-31 CVE-2004-2377 Denial Of Service vulnerability in Alcatel Omniswitch and Omniswitch 7800
Alcatel OmniSwitch 7000 and 7800 allows remote attackers to cause a denial of service (reboot) via certain network scans, as demonstrated using a Nessus port scan of ports 1 through 1024 with safe-checks disabled.
network
low complexity
alcatel
5.0
2002-03-25 CVE-2002-0119 Remote Restart vulnerability in Alcatel Speed Touch Home ADSL Unauthorized
Alcatel Speed Touch Home ADSL Modem allows remote attackers to cause a denial of service (reboot) via a network scan with unusual packets, such as nmap with OS detection.
network
low complexity
alcatel
5.0
1999-03-31 CVE-1999-1559 Unspecified vulnerability in Alcatel Omniswitch
Xylan OmniSwitch before 3.2.6 allows remote attackers to bypass the login prompt via a CTRL-D (control d) character, which locks other users out of the switch because it only supports one session at a time.
network
low complexity
alcatel
5.0