CVE-2014-3809

Name of the Vulnerable Software and Affected Versions Alcatel-Lucent 1830 Photonic Service Switch (PSS) versions 6.0 and earlier

Description A cross-site scripting (XSS) issue exists in the management interface, allowing remote attackers to inject arbitrary web script or HTML via the myurl parameter to "menu/pop.html".

Recommendations For versions 6.0 and earlier, avoid using the myurl parameter in the "menu/pop.html" endpoint until a fix is available. As a temporary workaround, consider restricting access to the management interface to minimize the risk of exploitation.