Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2015-2917
HistorySep 21, 2015 - 10:59 a.m.

CVE-2015-2917

2015-09-2110:59:05
CWE-20
[email protected]
web.nvd.nist.gov
22
cve-2015-2917
securifi almond
firmware
vulnerability
clickjacking
nvd

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6.9 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

56.7%

JSON

Securifi Almond devices with firmware before AL1-R201EXP10-L304-W34 and Almond-2015 devices with firmware before AL2-R088M unintentionally omit the X-Frame-Options HTTP header, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site that contains a (1) FRAME, (2) IFRAME, or (3) OBJECT element.

Affected configurations

NVD
Node
securifialmond_firmwareRange≤al1-r201exp10-l304-w33
AND
securifialmond
Node
securifialmond-2015_firmwareRange≤al2-r088
AND
securifialmond-2015

Related

prion 1
nvd 1
cvelist 1
cert 1
prion
prion
Design/Logic Flaw
2015-09-21 10:59:00
nvd
nvd
CVE-2015-2917
2015-09-21 10:59:05
cvelist
cvelist
CVE-2015-2917
2015-09-21 10:00:00
cert
cert
Securifi Almond routers contains multiple vulnerabilities
2015-09-10 00:00:00

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6.9 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

56.7%

JSON
Related for CVE-2015-2917
prion1nvd1cvelist1cert1