CVE:CVE-2015-3976
CNNVD:CNNVD-201511-286
GE Multilink ML800等都是美国通用电气（GE）公司的以太网交换机产品。
多款GE交换机存在跨站脚本漏洞。远程攻击者可利用该漏洞向用Web界面注入恶意的脚本。以下产品和版本受到影响：GE Multilink ML810 5.2.0及之前的版本；GE Multilink ML3000 5.2.0及之前的版本；GE Multilink ML3100 5.2.0及之前的版本；ML800 4.2.1及之前的版本；ML1200 4.2.1及之前的版本；ML1600 4.2.1及之前的版本；ML2400 4.2.1及之前的版本。
solution:Upgrade ge multilink_ml810_firmware to a higher version than 5.2.0,and avoid the version 5.2.0; Upgrade ge multilink_ml3000_firmware to a higher version than 5.2.0,and avoid the version (,5.2.0]; Upgrade ge multilink_ml3100_firmware to a higher version than 5.2.0,and avoid the version (,5.2.0]; Upgrade ge multilink_ml800_firmware to a higher version than 4.2.1,and avoid the version 4.2.1; Upgrade ge multilink_ml1200_firmware to a higher version than 4.2.1,and avoid the version 4.2.1; Upgrade ge multilink_ml1600_firmware to a higher version than 4.2.1,and avoid the version 4.2.1; Upgrade ge multilink_ml2400_firmware to a higher version than 4.2.1,and avoid the version 4.2.1