CVE:CVE-2016-4575
CNNVD:CNNVD-201605-384
Huawei PLK PLK-AL10C00B211等都是中国华为（Huawei）公司的智能手机产品。
多款Huawei产品的Email应用中存在跨站脚本漏洞，该漏洞源于程序缺少对部分特定字符的输出编码。远程攻击者可借助邮件消息利用该漏洞注入任意Web脚本或HTML。以下产品及版本受到影响：Huawei PLK PLK-AL10C00B211之前版本，PLK-AL10C92B211之前版本，ATH ATH-AL00C00B361之前版本，ATH-CL00C92B361之前版本，ATH-TL00HC01B361之前版本，ATH-UL00C00B361之前版本，CherryPlus CherryPlus-TL00C00B553之前版本，CherryPlus-UL00C00B553之前版本，CherryPlus-TL00MC01B553之前版本，RIO RIO-AL00C00B360之前版本。
solution:Upgrade huawei ath_firmware to a higher version than al00c00,cl00c92,tl00hc01,ul00c00,and avoid the version al00c00,cl00c92,tl00hc01,ul00c00; Upgrade huawei ath to a higher version than -; Upgrade huawei rio_firmware to a higher version than al00c00,and avoid the version al00c00; Upgrade huawei plk_firmware to a higher version than al10c00,al10c92,and avoid the version al10c00,al10c92; Upgrade huawei cherryplus_firmware to a higher version than tl00c00,tl00mc01,ul00c00,and avoid the version tl00c00,tl00mc01,ul00c00; Upgrade huawei cherryplus to a higher version than -