VYPR

omnivista-8770-unauth-rce

by Malerisch

CVEs (1)

  • CVE-2016-9796CriDec 3, 2016
    risk 0.68cvss 9.8epss 0.13

    Alcatel-Lucent OmniVista 8770 2.0 through 3.0 exposes different ORBs interfaces, which can be queried using the GIOP protocol on TCP port 30024. An attacker can bypass authentication, and OmniVista invokes methods (AddJobSet, AddJob, and ExecuteNow) that can be used to run…