Security Advisory - XSS Vulnerability in Huawei Agile Controller-Campus

A reflected cross-site scripting (XSS) vulnerability exists in some portal authentication page of the Agile Controller-Campus. When an attacker sends a malicious link to the system, the user is online and clicks on the link, XSS occurs. Therefore, the attacker may obtain the administrator privileges of the system. (Vulnerability ID: HWPSIRT-2015-11033)

This vulnerability has been assigned Common Vulnerabilities and Exposures (CVE) ID: CVE-2016-2214.

Huawei has released software updates to fix these vulnerabilities. This advisory is available at the following link:
<http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160203-01-agilecontroller-en&gt;