CVE-2008-1331: Alcatel-Lucent OmniPCX Office

High severity, CVSS 10.0. EPSS: 8.8% chance of exploitation in the next 30 days.

cgi-data/FastJSData.cgi in OmniPCX Office with Internet Access services OXO210 before 210/091.001, OXO600 before 610/014.001, and other versions, allows remote attackers to execute arbitrary commands and "obtain OXO resources" via shell metacharacters in the id2 parameter.

Affected products

• Alcatel-Lucent OmniPCX Office: from 210, before 210\/091.001 (fixed in 210\/091.001); from 610, before 610\/014.001 (fixed in 610\/014.001)

Published 2008-04-02. Last modified 2026-06-16.