description: The Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 is vulnerable to authenticated command injection via crafted HTTP request sent by a remote, authenticated attacker to /GponForm/device_Form?script/.
problem types: CWE-78: Improper Neutralization of Special Elements used in an OS Command
affected:
{
product: Alcatel Lucent I-240W-Q GPON ONT
vendor: Tenable
versions:
status: affected, version: Firmware version 3FE54567BOZJ19
}