This article applies to:

• R3000

Question:

Cross-Site Scripting Vulnerability

Reply

In May 2007, some security-related sites (e.g. Securityfocus.com and Secunia.com) reported a Cross-Site Scripting Vulnerability in the R3000.  Because the R3000 usually sits inside corporate firewalls, this vulnerability caused a minor threat.  However, it was fixed in software version 2.0.05.33, which was relased on 6/18/2007.

Be sure that your R3000 is running patch version  2.0.05.33, or later.  You can view your patch history in  the GUI under System / Patch.

This article was previously published as:

8e6 KB 276566