CVE:CVE-2016-10315
CNNVD:CNNVD-201704-173
Jensen of Scandinavia AS Air:Link 3G等都是挪威Jensen of Scandinavia AS公司的路由器。
多款Jensen of Scandinavia AS Air:Link产品存在安全漏洞。远程攻击者可通过向/goform/*页面发送‘submit-url’参数利用该漏洞实施开放重定向攻击。以下产品和版本受到影响：Jensen of Scandinavia AS Air:Link 3G (AL3G)2.23m(Rev. 3)版本；Air:Link 5000AC (AL5000AC) 1.13之前的版本；Air:Link 59300 (AL59300)1.04(Rev. 4)版本。
solution:Upgrade jensenofscandinavia al3g_firmware to a higher version than 2.23m,and avoid the version 2.23m; Upgrade jensenofscandinavia al5000ac_firmware to a higher version than 1.13,and avoid the version 1.13; Upgrade jensenofscandinavia al59300_firmware to a higher version than 1.04,and avoid the version 1.04