CVE-2017-8334

An issue was discovered on Securifi Almond, Almond+, and Almond 2015 devices with firmware AL-R096

published June 18, 2019

CVSS
—
EPSS
1%
Percentile
59.4
In the wild
Unconfirmed
What it is

An issue was discovered on Securifi Almond, Almond+, and Almond 2015 devices with firmware AL-R096. The device provides a user with the capability of blocking IP addresses using the web management interface. It seems that the device does not implement any cross-site scripting forgery protection mechanism which allows an attacker to trick a user who is logged in to the web management interface into executing a cross-site scripting payload on the user's browser and execute any action on the device provided by the web management interface.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00911 · 59.4th percentile
Published
2019-06-18T20:18Z
EPSS history
Timeline
  • 18 JUN 20:18Z
    An issue was discovered on Securifi Almond, Almond+, and Almond 2015 devices with firmware AL-R096
    cvelistv5