https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 21:35:13 +0000 https://vulnerability.circl.lu/vuln/cve-2024-29149 <p><strong>Affected:</strong> alcatel-lucent ale_300, alcatel-lucent ale_400, alcatel-lucent ale_500, alcatel-lucent ale_20, alcatel-lucent ale_30, alcatel-lucent ale_20h, alcatel-lucent ale_30h</p> <p>An issue was discovered in Alcatel-Lucent ALE NOE deskphones through 86x8_NOE-R300.1.40.12.4180 and SIP deskphones through 86x8_SIP-R200.1.01.10.728. Because of a time-of-check time-of-use vulnerability, an authenticated attacker is able to replace the verified firmware image with malicious firmware during the update process.</p> <p><strong>Affected:</strong> alcatel-lucent ale_300, alcatel-lucent ale_400, alcatel-lucent ale_500, alcatel-lucent ale_20, alcatel-lucent ale_30, alcatel-lucent ale_20h, alcatel-lucent ale_30h</p> <p>An issue was discovered in Alcatel-Lucent ALE NOE deskphones through 86x8_NOE-R300.1.40.12.4180 and SIP deskphones through 86x8_SIP-R200.1.01.10.728. Because of a time-of-check time-of-use vulnerability, an authenticated attacker is able to replace the verified firmware image with malicious firmware during the update process.</p> https://vulnerability.circl.lu/vuln/cve-2024-29149