CVE:CVE-2014-3809
CNNVD:CNNVD-201412-049
Alcatel-Lucent 1830 Photonic Service Switch（PSS）是法国阿尔卡特-朗讯（Alcatel-Lucent）公司的一款交换机产品。
Alcatel-Lucent 1830 Photonic Service Switch (PSS) 6.0及之前版本中的管理界面的pop.html脚本存在跨站脚本漏洞，该漏洞源于程序没有正确验证用户输入。远程攻击者可借助’myurl‘参数利用该漏洞在menu/pop.html中注入任意Web脚本或HTML。
solution:Upgrade nokia 1830_photonic_service_switch-4_firmware to a higher version than 6.0,and avoid the version (,6.0]; Upgrade nokia 1830_photonic_service_switch-16_firmware to a higher version than 6.0,and avoid the version (,6.0]; Upgrade nokia 1830_photonic_service_switch-32_firmware to a higher version than 6.0,and avoid the version (,6.0]