Alcatel-lucent Omnipcx — known CVE vulnerabilities

Every CVE whose affected-product data names Alcatel-lucent Omnipcx, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (8)

• CVE-2002-1691 — CVSS 10.0 (critical): Alcatel OmniPCX 4400 installs known user accounts and passwords in the /etc/password file by default, which allows remote attackers to gain…
• CVE-2007-5361 — CVSS 8.5 (high): The Communication Server in Alcatel-Lucent OmniPCX Enterprise 7.1 and earlier caches an IP address during a TFTP request from an IP Touch…
• CVE-2007-2512 — CVSS 7.5 (high): Alcatel-Lucent IP-Touch Telephone running OmniPCX Enterprise 7.0 and later enables the mini switch by default, which allows attackers to…
• CVE-2002-0293 — CVSS 6.2 (medium): FTP service in Alcatel OmniPCX 4400 allows the "halt" user to gain root privileges by modifying root's .profile file.
• CVE-2011-0344 — CVSS 5.8 (medium): Multiple stack-based buffer overflows in unspecified CGI programs in the Unified Maintenance Tool web interface in the embedded web server…
• CVE-2003-1108 — CVSS 5.0 (medium): The Session Initiation Protocol (SIP) implementation in Alcatel OmniPCX Enterprise 5.0 Lx allows remote attackers to cause a denial of…
• CVE-2002-0295 — CVSS 4.6 (medium): Alcatel OmniPCX 4400 installs files with world-writable permissions, which allows local users to reconfigure the system and possibly gain…
• CVE-2002-0294 — CVSS 2.1 (low): Alcatel 4400 installs the /chetc/shutdown command with setgid privileges, which allows many different local users to shut down the system.