CVE-2014-3809

6.1MEDIUM

Key Information

Vendor: Nokia
Status: 1830 Photonic Service Switch-4 Firmware
Vendor: CVE Published:; 31 January 2020

Summary

Cross-site scripting (XSS) vulnerability in the management interface in Alcatel-Lucent 1830 Photonic Service Switch (PSS) 6.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the myurl parameter to menu/pop.html.

CVSS V3.1

Score:

6.1

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Changed

Timeline

Vulnerability published.
Jan 31, 2020
Vulnerability Reserved.
May 21, 2014

Collectors

NVD DatabaseMitre Database