EUVD-2026-27335
GHSA-48q2-ffv8-pgrw
CVSS VectorNVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
3DescriptionNVD
The ping diagnostic handler in /bin/httpd_clientside for ALTICE LABS / SFR France GR140DG and GR140IG fibre CPE/Router/Gateway, inserts unsanitized user input into a system() call, allowing authenticated remote attackers to execute arbitrary commands as root via crafted destAddr parameters using shell command substitution.
AnalysisAI
Command injection in ALTICE LABS GR140DG and GR140IG fibre routers allows authenticated remote attackers to execute arbitrary commands as root. The ping diagnostic handler in /bin/httpd_clientside accepts unsanitized user input in the destAddr parameter and passes it to a system() call, enabling shell command substitution. …
Sign in for full analysis, threat intelligence, and remediation guidance.
RemediationAI
Within 24 hours: Identify and inventory all ALTICE LABS GR140DG and GR140IG routers in your network and document their firmware versions; restrict administrative access to these devices to essential personnel only and enforce multi-factor authentication where available. Within 7 days: Review administrative access logs for suspicious activity; implement network segmentation to isolate affected routers from sensitive systems; contact ALTICE LABS technical support for interim guidance and patch timeline. …
Sign in for detailed remediation steps.
Share
External POC / Exploit Code
Leaving vuln.today