CVE-2019-3922: Nokia I-240w-Q GPON Ont Firmware

Critical severity, CVSS 9.8. EPSS: 5.2% chance of exploitation in the next 30 days.

The Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 is vulnerable to a stack buffer overflow via crafted HTTP POST request sent by a remote, unauthenticated attacker to /GponForm/fsetup_Form. An attacker can leverage this vulnerability to potentially execute arbitrary code.

Affected products

• Nokia I-240w-Q GPON Ont Firmware: version 3fe54567bozj19 only

Published 2019-03-05. Last modified 2026-06-17.