CVE-2008-1331: cgi-data/FastJSData.cgi in OmniPCX Office with Internet Access services OXO210 before 210/091.001, OXO600 b...

Security readout for executives and security teams

This is a remote command execution flaw in Alcatel-Lucent OmniPCX Office Internet Access services. If an affected PBX is reachable, an attacker could run arbitrary system commands and access OXO resources. The sources do not show active exploitation, but public exploit information exists. Likely exposed assets are Alcatel-Lucent OmniPCX Office systems running Internet Access services, especially OXO210 before 210/091.001 or OXO600 before 610/014.001. Exposure cannot be confirmed from the bundle without inventory, version, and network reachability checks. Prioritize this for any organization still operating legacy OmniPCX Office systems. Remote command execution against telephony infrastructure can affect communications, service availability, and sensitive configuration data, even though current exploitation is not established in the provided sources. Mitigation focus: Identify all OmniPCX Office systems and their OXO software versions.; Upgrade affected OXO210 and OXO600 systems according to vendor PSIRT guidance.; Restrict Internet Access services to trusted management networks only..

Prepared

Jun 28, 2026, 19:09 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.