Cross-Site Scripting Vulnerability in Alcatel-Lucent 1830 Photonic Service Switch
CVE-2014-3809

6.1MEDIUM

Key Information:

Vendor

Nokia
Status
1830 Photonic Service Switch-4 Firmware
Vendor
CVE Published:
31 January 2020

What is CVE-2014-3809?

A cross-site scripting vulnerability exists in the management interface of the Alcatel-Lucent 1830 Photonic Service Switch. This flaw allows attackers to inject arbitrary web script or HTML through the 'myurl' parameter in 'menu/pop.html'. If exploited, it could lead to unauthorized access or actions taken on behalf of the user, posing significant risks to web security.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://www.securityfocus.com/archive/1/534124
x_refsource_MISC

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.