Threat database

Successful exploitation of the vulnerability could allow an attacker to execute arbitrary commands as root, potentially leading to the loss of confidentiality, integrity, availability, and full control of the access point.

EPSS 14%VulnerabilityAlcatel-Lucent#cwe-77Germany+9

Successful exploitation of the vulnerability could allow an unauthenticated attacker to obtain a valid session ID with administrator privileges by spoofing the login request, potentially allowing the attacker to modify the behaviour of the access point.

EPSS 16%VulnerabilityAlcatel-Lucent#cwe-384Germany+7

Successful exploitation of the vulnerability could allow an attacker to inject commands with root privileges on the access point, potentially leading to the loss of confidentiality, integrity, availability, and full control of the access point.

EPSS 37%VulnerabilityAlcatel-Lucent#cwe-77Germany+9

Successful exploitation of the vulnerability could allow an attacker with administrator credentials for the access point to inject malicious JavaScript into the payload of web traffics, potentially leading to session hijacking and denial-of-service (DoS).

EPSS 0.3%VulnerabilityAlcatel-Lucent#cwe-77Germany+7

CVE-2007-3010 is a remote code execution vulnerability in the masterCGI component of the Unified Maintenance Tool in Alcatel OmniPCX Enterprise Communication Server. This flaw allows remote attackers to execute arbitrary commands on the affected system. The vulnerability has been exploited in the wild, indicating active threat usage. No specific affected versions or patch information is provided in the available data.