CVE-2017-8328

An issue was discovered on Securifi Almond, Almond+, and Almond 2015 devices with firmware AL-R096

published June 18, 2019

CVSS
—
EPSS
1%
Percentile
71.6
In the wild
Unconfirmed
What it is

An issue was discovered on Securifi Almond, Almond+, and Almond 2015 devices with firmware AL-R096. The device provides a user with the capability of changing the administrative password for the web management interface. It seems that the device does not implement any cross site request forgery protection mechanism which allows an attacker to trick a user who is logged in to the web management interface to change a user's password. Also this is a systemic issue.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01372 · 71.6th percentile
Published
2019-06-18T20:15Z
EPSS history
Timeline
  • 18 JUN 20:15Z
    An issue was discovered on Securifi Almond, Almond+, and Almond 2015 devices with firmware AL-R096
    cvelistv5