CVE-2019-20049 - An issue was discovered on Alcatel-Lucent OmniVista 4760 devices. A remote unauthenticated attacker

CVE-2019-20049

Summary

An issue was discovered on Alcatel-Lucent OmniVista 4760 devices. A remote unauthenticated attacker can chain a directory traversal (which helps to bypass authentication) with an insecure file upload to achieve Remote Code Execution as SYSTEM. The directory traversal is in the __construct() whereas the insecure file upload is in SetSkinImages().

References

Vulnerable Configurations

cpe:2.3:a:al-enterprise:omnivista_4760:*:*:*:*:*:*:*:*
cpe:2.3:a:al-enterprise:omnivista_4760:*:*:*:*:*:*:*:*

CVSS

Base:	10.0 (as of 07-01-2020 - 20:39)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	NONE

Impact

Confidentiality	Integrity	Availability
COMPLETE	COMPLETE	COMPLETE

cvss-vector via4

AV:N/AC:L/Au:N/C:C/I:C/A:C

refmap via4

misc

saint via4

description	Alcatel OmniVista remote command execution
id	web_tool_omnivista
title	alcatel_omnivista
type	remote

Last major update

07-01-2020 - 20:39

Published

27-12-2019 - 19:15

Last modified

07-01-2020 - 20:39