Alcatel-lucent vulnerabilities
We track 4 vulnerabilities in Alcatel-lucent products across 8 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on July 16, 2025.
Latest Alcatel-lucent vulnerabilities
- 8.1 High severity
OmniAccess Stellar Products: Improper Neutralization of Special Elements used in a Command
Successful exploitation of the vulnerability could allow an attacker to execute arbitrary commands as root, potentially leading to the loss of confidentiality, integrity, availability, and full control of the access point.
- 9.8 Critical severity
OmniAccess Stellar Products: Session Fixation
Successful exploitation of the vulnerability could allow an unauthenticated attacker to obtain a valid session ID with administrator privileges by spoofing the login request, potentially allowing the attacker to modify the behaviour of the access point.
- 9.8 Critical severity
OmniAccess Stellar Products: Improper Neutralization of Special Elements used in a Command
Successful exploitation of the vulnerability could allow an attacker to inject commands with root privileges on the access point, potentially leading to the loss of confidentiality, integrity, availability, and full control of the access point.
- 7.4 High severity
ale_300: Time-of-check Time-of-use (TOCTOU) Race Condition
An issue was discovered in Alcatel-Lucent ALE NOE deskphones through 86x8_NOE-R300.1.40.12.4180 and SIP deskphones through 86x8_SIP-R200.1.01.10.728. Because of a time-of-check time-of-use vulnerability, an authenticated attacker is able to replace the verifie