Alcatel

14 CVEs across 11 Alcatel products. Browse Alcatel vulnerabilities, severities, and proof-of-concept exploits.

Alcatel products with known CVEs

ProductCVEs
Speed Touch Home4
Speedtouch 7g Router3
Aos2
Omniswitch2
A301
A30 Firmware1
Adsl Modem 10001
Omniswitch 78001
Speedtouch 5x6 Router1
Speedtouch 5x6 Router Firmware1
Speed Touch Adsl Modem1
Alcatel CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2018-6597Medium6.82018-08-29The Alcatel A30 device with a build fingerprint of TCL/5046G/MICKEY6US:7.0/NRD90M/J63:user/release-keys contains a hidden privilege escalation capability to ac…
CVE-2011-45052011-11-22The UPnP IGD implementation on SpeedTouch 5x6 devices with firmware before 6.2.29 allows remote attackers to establish arbitrary port mappings by sending a UPn…
CVE-2008-43832008-10-03Stack-based buffer overflow in the Agranet-Emweb embedded management web server in Alcatel OmniSwitch OS7000, OS6600, OS6800, OS6850, and OS9000 Series devices…
CVE-2007-53852007-10-12Multiple cross-site scripting (XSS) vulnerabilities in the Thomson/Alcatel SpeedTouch 7G router, as used for the BT Home Hub 6.2.6.B and earlier, allow remote…
CVE-2007-53842007-10-12Multiple cross-site request forgery (CSRF) vulnerabilities in the Thomson/Alcatel SpeedTouch 7G router, as used for the BT Home Hub 6.2.6.B and earlier, allow…
CVE-2007-53832007-10-12The Thomson/Alcatel SpeedTouch 7G router, as used for the BT Home Hub 6.2.6.B and earlier, allows remote attackers on an intranet to bypass authentication and…
CVE-2004-23772004-12-31Alcatel OmniSwitch 7000 and 7800 allows remote attackers to cause a denial of service (reboot) via certain network scans, as demonstrated using a Nessus port s…
CVE-2002-12722002-12-11Alcatel OmniSwitch 7700/7800 switches running AOS 5.1.1 contains a back door telnet server that was intended for development but not removed before distributio…
CVE-2002-01192002-03-25Alcatel Speed Touch Home ADSL Modem allows remote attackers to cause a denial of service (reboot) via a network scan with unusual packets, such as nmap with OS…
CVE-2001-14842001-12-31Alcatel ADSL modems allow remote attackers to access the Trivial File Transfer Protocol (TFTP) to modify firmware and configuration via a bounce attack from a…
CVE-2001-14262001-04-10Alcatel Speed Touch running firmware KHDSAA.108 and KHDSAA.132 through KHDSAA.134 has a TFTP server running without a password, which allows remote attackers t…
CVE-2001-14252001-04-10The challenge-response authentication of the EXPERT user for Alcatel Speed Touch running firmware KHDSAA.108 and KHDSAA.132 through KHDSAA.134 allows remote at…
CVE-2001-14242001-04-10Alcatel Speed Touch ADSL modem running firmware KHDSAA.108, KHDSAA.132, KHDSBA.133, and KHDSAA.134 has a blank default password, which allows remote attackers…
CVE-1999-15591999-03-31Xylan OmniSwitch before 3.2.6 allows remote attackers to bypass the login prompt via a CTRL-D (control d) character, which locks other users out of the switch…