CVE-2015-4587: XSS
Cross-site scripting (XSS) vulnerability in the Alcatel-Lucent CellPipe 7130 router with firmware 1.0.0.20h.HOL allows remote attackers to inject arbitrary web script or HTML via the "Custom application" field in the "port triggering" menu.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-4587?
CVE-2015-4587 is classified as a Cross-site Scripting (XSS) vulnerability which can allow attackers to inject malicious scripts.
How do I fix CVE-2015-4587?
To fix CVE-2015-4587, update the Alcatel-Lucent CellPipe 7130 router firmware to the latest version that addresses this vulnerability.
What systems are affected by CVE-2015-4587?
CVE-2015-4587 affects the Alcatel-Lucent CellPipe 7130 router running firmware version 1.0.0.20h.HOL.
What can attackers do with CVE-2015-4587?
Attackers exploiting CVE-2015-4587 can inject arbitrary web scripts or HTML through the 'Custom application' field in the port triggering menu.
Is there a workaround for CVE-2015-4587?
A temporary workaround for CVE-2015-4587 is to limit user access to the router's administrative interface to trusted personnel only.