CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2007-09-18
Alcatel-Lucent OmniPCX Enterprise (OXE) masterCGI Remote Command Execution (RCE) Vulnerability (CVE-2007-3010) Analysis and Mitigation Guide
[Affected Scope] Unified Maintenance Tool in Alcatel-Lucent OmniPCX Enterprise Communication Server R7.1 and earlier.
[Impact] Unauthenticated remote attackers can execute arbitrary system commands with root privileges by sending crafted HTTP requests containing shell metacharacters.
[Mitigation] Immediately upgrade to the patched firmware version and restrict external network access to the management CGI interface.