alcatel records
14 published records for vendor alcatel.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer1
- CWE-16 Configuration1
- CWE-287 Improper Authentication1
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
The weakness classes this vendor ships most often: where to look.
CWEAll records
14 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
42Plan | CVE-2008-4383No exploit | Stack-based buffer overflow in the Agranet-Emweb embedded management web server in Alcatel OmniSwitch OS7000, OS6600, OS6800, OS6850, and OSalcatel · aos · CWE-119 | Critical10.0 | — | 8.2% | Oct 3, 2008 |
42Plan | CVE-2002-1272No exploit | Alcatel OmniSwitch 7700/7800 switches running AOS 5.1.1 contains a back door telnet server that was intended for development but not removedalcatel · aos | Critical10.0 | — | 5.2% | Dec 11, 2002 |
41Plan | CVE-2007-5383No exploit | The Thomson/Alcatel SpeedTouch 7G router, as used for the BT Home Hub 6.2.6.B and earlier, allows remote attackers on an intranet to bypass alcatel · speedtouch 7g router · CWE-287 | Critical10.0 | — | 3.8% | Oct 11, 2007 |
31Monitor | CVE-2001-1425No exploit | The challenge-response authentication of the EXPERT user for Alcatel Speed Touch running firmware KHDSAA.108 and KHDSAA.132 through KHDSAA.1alcatel · speed touch home | High7.5 | — | 3.7% | Apr 10, 2001 |
31Monitor | CVE-2001-1424No exploit | Alcatel Speed Touch ADSL modem running firmware KHDSAA.108, KHDSAA.132, KHDSBA.133, and KHDSAA.134 has a blank default password, which allowalcatel · speed touch home | High7.5 | — | 3.5% | Apr 10, 2001 |
31Monitor | CVE-2001-1484No exploit | Alcatel ADSL modems allow remote attackers to access the Trivial File Transfer Protocol (TFTP) to modify firmware and configuration via a boalcatel · adsl modem 1000 | High7.5 | — | 2.3% | Dec 31, 2001 |
31Monitor | CVE-2001-1426No exploit | Alcatel Speed Touch running firmware KHDSAA.108 and KHDSAA.132 through KHDSAA.134 has a TFTP server running without a password, which allowsalcatel · speed touch home | High7.5 | — | 2.0% | Apr 10, 2001 |
30Monitor | CVE-2011-4505No exploit | The UPnP IGD implementation on SpeedTouch 5x6 devices with firmware before 6.2.29 allows remote attackers to establish arbitrary port mappinalcatel · speedtouch 5x6 router firmware · CWE-16 | High7.5 | — | 1.3% | Nov 22, 2011 |
27Monitor | CVE-2018-6597No exploit | The Alcatel A30 device with a build fingerprint of TCL/5046G/MICKEY6US:7.0/NRD90M/J63:user/release-keys contains a hidden privilege escalatialcatel · a30 firmware | Medium6.8 | — | 0.5% | Aug 29, 2018 |
21Monitor | CVE-2002-0119No exploit | Alcatel Speed Touch Home ADSL Modem allows remote attackers to cause a denial of service (reboot) via a network scan with unusual packets, salcatel · speed touch home | Medium5.0 | — | 1.9% | Mar 25, 2002 |
21Monitor | CVE-2004-2377No exploit | Alcatel OmniSwitch 7000 and 7800 allows remote attackers to cause a denial of service (reboot) via certain network scans, as demonstrated usalcatel · omniswitch | Medium5.0 | — | 1.7% | Dec 31, 2004 |
20Monitor | CVE-1999-1559No exploit | Xylan OmniSwitch before 3.2.6 allows remote attackers to bypass the login prompt via a CTRL-D (control d) character, which locks other usersalcatel · omniswitch | Medium5.0 | — | 1.6% | Mar 31, 1999 |
17Monitor | CVE-2007-5385No exploit | Multiple cross-site scripting (XSS) vulnerabilities in the Thomson/Alcatel SpeedTouch 7G router, as used for the BT Home Hub 6.2.6.B and earalcatel · speedtouch 7g router · CWE-79 | Medium4.3 | — | 1.0% | Oct 11, 2007 |
17Monitor | CVE-2007-5384No exploit | Multiple cross-site request forgery (CSRF) vulnerabilities in the Thomson/Alcatel SpeedTouch 7G router, as used for the BT Home Hub 6.2.6.B alcatel · speedtouch 7g router · CWE-352 | Medium4.3 | — | 0.6% | Oct 11, 2007 |
- CVE-2008-438342Plan
Stack-based buffer overflow in the Agranet-Emweb embedded management web server in Alcatel OmniSwitch OS7000, OS6600, OS6800, OS6850, and OS
CriticalCVSS 10.0No exploitEPSS 8%alcatel · aosOct 3, 2008
- CVE-2002-127242Plan
Alcatel OmniSwitch 7700/7800 switches running AOS 5.1.1 contains a back door telnet server that was intended for development but not removed
CriticalCVSS 10.0No exploitEPSS 5%alcatel · aosDec 11, 2002
- CVE-2007-538341Plan
The Thomson/Alcatel SpeedTouch 7G router, as used for the BT Home Hub 6.2.6.B and earlier, allows remote attackers on an intranet to bypass
CriticalCVSS 10.0No exploitEPSS 3%alcatel · speedtouch 7g routerOct 11, 2007
- CVE-2001-142531Monitor
The challenge-response authentication of the EXPERT user for Alcatel Speed Touch running firmware KHDSAA.108 and KHDSAA.132 through KHDSAA.1
HighCVSS 7.5No exploitEPSS 3%alcatel · speed touch homeApr 10, 2001
- CVE-2001-142431Monitor
Alcatel Speed Touch ADSL modem running firmware KHDSAA.108, KHDSAA.132, KHDSBA.133, and KHDSAA.134 has a blank default password, which allow
HighCVSS 7.5No exploitEPSS 3%alcatel · speed touch homeApr 10, 2001
- CVE-2001-148431Monitor
Alcatel ADSL modems allow remote attackers to access the Trivial File Transfer Protocol (TFTP) to modify firmware and configuration via a bo
HighCVSS 7.5No exploitEPSS 2%alcatel · adsl modem 1000Dec 31, 2001
- CVE-2001-142631Monitor
Alcatel Speed Touch running firmware KHDSAA.108 and KHDSAA.132 through KHDSAA.134 has a TFTP server running without a password, which allows
HighCVSS 7.5No exploitEPSS 2%alcatel · speed touch homeApr 10, 2001
- CVE-2011-450530Monitor
The UPnP IGD implementation on SpeedTouch 5x6 devices with firmware before 6.2.29 allows remote attackers to establish arbitrary port mappin
HighCVSS 7.5No exploitEPSS 1%alcatel · speedtouch 5x6 router firmwareNov 22, 2011
- CVE-2018-659727Monitor
The Alcatel A30 device with a build fingerprint of TCL/5046G/MICKEY6US:7.0/NRD90M/J63:user/release-keys contains a hidden privilege escalati
MediumCVSS 6.8No exploitEPSS 0%alcatel · a30 firmwareAug 29, 2018
- CVE-2002-011921Monitor
Alcatel Speed Touch Home ADSL Modem allows remote attackers to cause a denial of service (reboot) via a network scan with unusual packets, s
MediumCVSS 5.0No exploitEPSS 1%alcatel · speed touch homeMar 25, 2002
- CVE-2004-237721Monitor
Alcatel OmniSwitch 7000 and 7800 allows remote attackers to cause a denial of service (reboot) via certain network scans, as demonstrated us
MediumCVSS 5.0No exploitEPSS 1%alcatel · omniswitchDec 31, 2004
- CVE-1999-155920Monitor
Xylan OmniSwitch before 3.2.6 allows remote attackers to bypass the login prompt via a CTRL-D (control d) character, which locks other users
MediumCVSS 5.0No exploitEPSS 1%alcatel · omniswitchMar 31, 1999
- CVE-2007-538517Monitor
Multiple cross-site scripting (XSS) vulnerabilities in the Thomson/Alcatel SpeedTouch 7G router, as used for the BT Home Hub 6.2.6.B and ear
MediumCVSS 4.3No exploitEPSS 1%alcatel · speedtouch 7g routerOct 11, 2007
- CVE-2007-538417Monitor
Multiple cross-site request forgery (CSRF) vulnerabilities in the Thomson/Alcatel SpeedTouch 7G router, as used for the BT Home Hub 6.2.6.B
MediumCVSS 4.3No exploitEPSS 0%alcatel · speedtouch 7g routerOct 11, 2007