XSS Vulnerability Found in Alcatel-Lucent Carrier-Grade Switches

  • 1 December 2014
  • 0 replies
  • 143 views

Userlevel 7
Badge +54
By Eduard Kovacs on December 01, 2014 A reflected cross-site scripting (XSS) vulnerability has been identified in the management interface of the Alcatel-Lucent 1830 Photonic Service Switch, but the vendor doesn't plan on fixing it any time soon.
The 1830 Photonic Service Switch is part of the French global telecommunications equipment company's offering for cable multiple-system operator (MSO) networks.
The flaw, which affects version 6.0 and earlier of the product, was discovered in May by the Computer Security Incident Response Team (CSIRT) of the Switzerland-based telecoms company Swisscom. The vulnerability has been assigned the CVE identifier CVE-2014-3809.
 


 
Full Article

0 replies

Be the first to reply!

Reply