Skip to content
OpenAdvisories

Vendor

Alcatel-Lucent

4 known vulnerabilities.

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2025-52689 Public exploit EPSS 17%

    Weak Session ID Check in the OmniAccess Stellar Web Management Interface

    Successful exploitation of the vulnerability could allow an unauthenticated attacker to obtain a valid session ID with administrator privileges by spoofing the login request, potentially allowing the attacker to modify the behaviour of the access point.

  • Critical 9.8
    CVE-2025-52688 Public exploit EPSS 37%

    Command Injection Vulnerability in the OmniAccess Stellar Web Management Interface

    Successful exploitation of the vulnerability could allow an attacker to inject commands with root privileges on the access point, potentially leading to the loss of confidentiality, integrity, availability, and full control of the access point.