Filtered by vendor Altice Subscriptions
Filtered by product Gr140dg Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2026-31195 1 Altice 2 Gr140dg, Gr140ig 2026-05-07 8.8 High
The ping diagnostic handler in /bin/httpd_clientside for ALTICE LABS / SFR France GR140DG and GR140IG fibre CPE/Router/Gateway, inserts unsanitized user input into a system() call, allowing authenticated remote attackers to execute arbitrary commands as root via crafted destAddr parameters using shell command substitution.
CVE-2026-31196 1 Altice 2 Gr140dg, Gr140ig 2026-05-07 8.8 High
The traceroute diagnostic handler in /bin/httpd_clientside for ALTICE LABS / SFR France GR140DG and GR140IG fibre CPE/Router/Gateway, inserts unsanitized user input into a system() call, allowing authenticated remote attackers to execute arbitrary commands as root via crafted destAddr parameters using shell command substitution.