PT-2020-10064 · Tellabs · Tellabs Optical Line Terminal (Olt) 1150

Published 2020-03-20 · Updated 2020-08-24 · CVE-2019-19148

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Tellabs Optical Line Terminal (OLT) 1150 versions prior to SR30.1 and SR31.1

Description The issue allows for Remote Command Execution via the -l option to TELNET or SSH.

Recommendations For versions prior to SR30.1, update to SR30.1 or later. For versions prior to SR31.1, update to SR31.1 or later.

Exploit

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2019-19148

Affected Products

Tellabs Optical Line Terminal (Olt) 1150

References · 5

• 🔥 https://github.com/ellwoodthewood/tellabs_rce · Exploit
• https://osv.dev/vulnerability/CVE-2019-19148 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-19148 · Security Note
• https://t.me/cvenotify/1963 · Telegram Post
• https://docs.tellabs.com/articles/#%21vulnerability-response/cve-2019-19148 · Note