Vulnerabilities > Nokia > I 240W Q Gpon ONT Firmware > Critical

DATE CVE VULNERABILITY TITLE RISK
2019-03-05 CVE-2019-3918 Use of Hard-coded Credentials vulnerability in Nokia I-240W-Q Gpon ONT Firmware 3Fe54567Bozj19
The Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 contains multiple hard coded credentials for the Telnet and SSH interfaces.
network
low complexity
nokia CWE-798
critical
 9.8
9.8
2019-03-05 CVE-2019-3922 Out-of-bounds Write vulnerability in Nokia I-240W-Q Gpon ONT Firmware 3Fe54567Bozj19
The Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 is vulnerable to a stack buffer overflow via crafted HTTP POST request sent by a remote, unauthenticated attacker to /GponForm/fsetup_Form.
network
low complexity
nokia CWE-787
critical
 9.8
9.8