CVE:CVE-2010-3010
CNNVD:CNNVD-201009-138
具有1.0.13之前版本固件的HP 3Com OfficeConnect Gigabit VPN Firewall 3CREVF100-731.0.13之前版本中存在跨站脚本攻击漏洞。远程攻击者可借助未明向量注入任意web脚本或HTML。
solution:Upgrade hp 3com_officeconnect_gigabit_vpn_firewall_software to a higher version than 1.0.12,1.0.8,and avoid the version (,1.0.12],1.0.8; Upgrade hp 3crevf100-73 to a higher version than *