Skip to content
Noroxi

Alcatel-Lucent records

27 published records for vendor alcatel-lucent.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
4
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 16
  2. 17
  3. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

27 records
  • CVE-2016-9796
    43Plan

    Alcatel-Lucent OmniVista 8770 2.0 through 3.0 exposes different ORBs interfaces, which can be queried using the GIOP protocol on TCP port 30

    CriticalCVSS 9.8Proof of conceptEPSS 13%

    alcatel-lucent · omnivista 8770 network management systemDec 3, 2016

  • CVE-2008-1331
    43Plan

    cgi-data/FastJSData.cgi in OmniPCX Office with Internet Access services OXO210 before 210/091.001, OXO600 before 610/014.001, and other vers

    CriticalCVSS 10.0Proof of conceptEPSS 9%

    alcatel-lucent · omnipcx officeApr 2, 2008

  • CVE-2008-4383
    42Plan

    Stack-based buffer overflow in the Agranet-Emweb embedded management web server in Alcatel OmniSwitch OS7000, OS6600, OS6800, OS6850, and OS

    CriticalCVSS 10.0No exploitEPSS 8%

    alcatel · aosOct 3, 2008

  • CVE-2002-1691
    41Plan

    Alcatel OmniPCX 4400 installs known user accounts and passwords in the /etc/password file by default, which allows remote attackers to gain

    CriticalCVSS 10.0No exploitEPSS 4%

    alcatel-lucent · omnipcxDec 31, 2002

  • CVE-2007-1822
    41Plan

    Alcatel-Lucent Lucent Technologies voice mail systems allow remote attackers to retrieve or remove messages, or reconfigure mailboxes, by sp

    CriticalCVSS 10.0No exploitEPSS 3%

    alcatel-lucent · voice mail systemApr 2, 2007

  • CVE-2007-5361
    35Monitor

    The Communication Server in Alcatel-Lucent OmniPCX Enterprise 7.1 and earlier caches an IP address during a TFTP request from an IP Touch ph

    HighCVSS 8.5No exploitEPSS 2%

    alcatel-lucent · omnipcxNov 20, 2007

  • CVE-2007-0931
    32Monitor

    Heap-based buffer overflow in the management interfaces in (1) Aruba Mobility Controllers 200, 800, 2400, and 6000 and (2) Alcatel-Lucent Om

    HighCVSS 7.5No exploitEPSS 6%

    alcatel-lucent · omniaccess wirelessFeb 14, 2007

  • CVE-2007-0932
    31Monitor

    The (1) Aruba Mobility Controllers 200, 600, 2400, and 6000 and (2) Alcatel-Lucent OmniAccess Wireless 43xx and 6000 do not properly impleme

    HighCVSS 7.5No exploitEPSS 2%

    alcatel-lucent · omniaccess wirelessFeb 14, 2007

  • CVE-2015-6498
    31Monitor

    Alcatel-Lucent Home Device Manager before 4.1.10, 4.2.x before 4.2.2 allows remote attackers to spoof and make calls as target devices.

    HighCVSS 7.5No exploitEPSS 2%

    alcatel-lucent · home device managerAug 9, 2017

  • CVE-2007-2512
    30Monitor

    Alcatel-Lucent IP-Touch Telephone running OmniPCX Enterprise 7.0 and later enables the mini switch by default, which allows attackers to gai

    HighCVSS 7.5No exploitEPSS 1%

    alcatel-lucent · omnipcxJun 7, 2007

  • CVE-2010-3279
    30Monitor

    The default configuration of the CCAgent option before 9.0.8.4 in the management server (aka TSA) component in Alcatel-Lucent OmniTouch Cont

    HighCVSS 7.6No exploitEPSS 1%

    alcatel-lucent · ccagentSep 23, 2010

  • CVE-2024-29149
    29Monitor

    An issue was discovered in Alcatel-Lucent ALE NOE deskphones through 86x8_NOE-R300.1.40.12.4180 and SIP deskphones through 86x8_SIP-R200.1.0

    HighCVSS 7.4No exploitEPSS 0%

    May 7, 2024

  • CVE-2015-2805
    28Monitor

    Cross-site request forgery (CSRF) vulnerability in sec/content/sec_asa_users_local_db_add.html in the management web interface in Alcatel-Lu

    MediumCVSS 6.8Proof of conceptEPSS 3%

    alcatel-lucent · omniswitch firmwareJun 16, 2015

  • CVE-2010-3280
    27Monitor

    The CCAgent option 9.0.8.4 and earlier in the management server (aka TSA) component in Alcatel-Lucent OmniTouch Contact Center Standard Edit

    MediumCVSS 6.9No exploitEPSS 1%

    alcatel-lucent · ccagentSep 23, 2010

  • CVE-2015-4586
    27Monitor

    Cross-site request forgery (CSRF) vulnerability in Alcatel-Lucent CellPipe 7130 RG 5Ae.M2013 HOL with firmware 1.0.0.20h.HOL allows remote a

    MediumCVSS 6.8No exploitEPSS 1%

    alcatel-lucent · cellpipe 7130 rg 5ae.m2013 hol firmwareJun 23, 2015

  • CVE-2011-0344
    24Monitor

    Multiple stack-based buffer overflows in unspecified CGI programs in the Unified Maintenance Tool web interface in the embedded web server i

    MediumCVSS 5.8No exploitEPSS 2%

    alcatel-lucent · omnipcxMar 8, 2011

  • CVE-2002-0293
    24Monitor

    FTP service in Alcatel OmniPCX 4400 allows the "halt" user to gain root privileges by modifying root's .profile file.

    MediumCVSS 6.2No exploitEPSS 0%

    alcatel-lucent · omnipcxMay 31, 2002

  • CVE-2003-1108
    22Monitor

    The Session Initiation Protocol (SIP) implementation in Alcatel OmniPCX Enterprise 5.0 Lx allows remote attackers to cause a denial of servi

    MediumCVSS 5.0No exploitEPSS 5%

    alcatel-lucent · omnipcxDec 31, 2003

  • CVE-2010-3281
    22Monitor

    Stack-based buffer overflow in the HTTP proxy service in Alcatel-Lucent OmniVista 4760 server before R5.1.06.03.c_Patch3 allows remote attac

    MediumCVSS 5.4No exploitEPSS 2%

    alcatel-lucent · omnivista 4760 serverSep 23, 2010

  • CVE-2015-8687
    21Monitor

    Multiple cross-site scripting (XSS) vulnerabilities in the Management Console in Alcatel-Lucent Motive Home Device Manager (HDM) before 4.2

    MediumCVSS 5.4No exploitEPSS 1%

    alcatel-lucent · motive home device managerMar 23, 2017

  • CVE-2015-2804
    18Monitor

    The management web interface in Alcatel-Lucent OmniSwitch 6450, 6250, 6850E, 9000E, 6400, and 6855 with firmware before 6.6.4.309.R01 and 6.

    MediumCVSS 4.3No exploitEPSS 2%

    alcatel-lucent · omniswitch firmwareJun 16, 2015

  • CVE-2007-5190
    18Monitor

    Multiple cross-site scripting (XSS) vulnerabilities in Alcatel OmniVista 4760 R4.2 and earlier allow remote attackers to inject arbitrary we

    MediumCVSS 4.3Proof of conceptEPSS 2%

    alcatel-lucent · omnivistaOct 22, 2007

  • CVE-2002-0295
    18Monitor

    Alcatel OmniPCX 4400 installs files with world-writable permissions, which allows local users to reconfigure the system and possibly gain pr

    MediumCVSS 4.6No exploitEPSS 0%

    alcatel-lucent · omnipcxMay 31, 2002

  • CVE-2013-4653
    17Monitor

    Multiple cross-site scripting (XSS) vulnerabilities in the signin functionality of ics in MyTeamwork services in Alcatel-Lucent Omnitouch 86

    MediumCVSS 4.3No exploitEPSS 1%

    alcatel-lucent · omnitouch 8400 instant communications suiteAug 19, 2013

  • CVE-2015-4587
    17Monitor

    Cross-site scripting (XSS) vulnerability in the Alcatel-Lucent CellPipe 7130 router with firmware 1.0.0.20h.HOL allows remote attackers to i

    MediumCVSS 4.3No exploitEPSS 1%

    alcatel-lucent · cellpipe 7130 router firmwareJun 18, 2015