An issue in the Arcadyan Livebox Fibra PRV3399B_B_LT allows a remote or local attacker to modify the GPON link value without authentication, causing an internet service disruption via the /firstconnection.cgi endpoint.
The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.