CVE-2015-4587: Cross-site scripting (XSS) vulnerability in the Alcatel-Lucent CellPipe 7130 router with firmware 1.0.0.20h...

Security readout for executives and security teams

An attacker could place malicious browser code into a router configuration field. If an administrator later views the affected page, that code may run in the admin's browser, potentially abusing their session or changing settings. The public record does not state severity, exploit activity, or a vendor fix. Exposure is likely limited to organizations still operating Alcatel-Lucent CellPipe 7130 routers with firmware 1.0.0.20h.HOL. Risk increases if the router web administration interface is reachable from untrusted networks or used by privileged administrators. Prioritize asset discovery first. This is an old router XSS with incomplete severity data, but unsupported or internet-exposed network equipment can create outsized operational risk. Replace or isolate affected devices if vendor guidance is unavailable. Mitigation focus: Check vendor or service-provider guidance for firmware updates or replacement options.; Restrict router administration interfaces to trusted management networks or VPN access.; Remove internet exposure from the web management interface where present..

Prepared

Jun 13, 2026, 22:39 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.