https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 23:31:28 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2024-29149 <p>An issue was discovered in Alcatel-Lucent ALE NOE deskphones through 86x8_NOE-R300.1.40.12.4180 and SIP deskphones through 86x8_SIP-R200.1.01.10.728. Because of a time-of-check time-of-use vulnerability, an authenticated attacker is able to replace the verified firmware image with malicious firmware during the update process.</p> <p>An issue was discovered in Alcatel-Lucent ALE NOE deskphones through 86x8_NOE-R300.1.40.12.4180 and SIP deskphones through 86x8_SIP-R200.1.01.10.728. Because of a time-of-check time-of-use vulnerability, an authenticated attacker is able to replace the verified firmware image with malicious firmware during the update process.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2024-29149 https://vulnerability.circl.lu/vuln/ghsa-4g7f-972r-hmcv <p>An issue was discovered in Alcatel-Lucent ALE NOE deskphones through 86x8_NOE-R300.1.40.12.4180 and SIP deskphones through 86x8_SIP-R200.1.01.10.728. Because of a time-of-check time-of-use vulnerability, an authenticated attacker is able to replace the verified firmware image with malicious firmware during the update process.</p> <p>An issue was discovered in Alcatel-Lucent ALE NOE deskphones through 86x8_NOE-R300.1.40.12.4180 and SIP deskphones through 86x8_SIP-R200.1.01.10.728. Because of a time-of-check time-of-use vulnerability, an authenticated attacker is able to replace the verified firmware image with malicious firmware during the update process.</p> https://vulnerability.circl.lu/vuln/ghsa-4g7f-972r-hmcv https://vulnerability.circl.lu/vuln/gsd-2024-29149 gsd-2024-29149 https://vulnerability.circl.lu/vuln/gsd-2024-29149 https://vulnerability.circl.lu/vuln/wid-sec-w-2024-1524 <p>Ein physischer oder ein entfernter anonymer Angreifer kann mehrere Schwachstellen in Alcatel Lucent Enterprise Desk Phone ausnutzen, um seine Rechte zu erweitern oder Informationen offenzulegen.</p> <p>Ein physischer oder ein entfernter anonymer Angreifer kann mehrere Schwachstellen in Alcatel Lucent Enterprise Desk Phone ausnutzen, um seine Rechte zu erweitern oder Informationen offenzulegen.</p> https://vulnerability.circl.lu/vuln/wid-sec-w-2024-1524