CVE-2017-8331

🗓️ 18 Jun 2019 20:15:11Reported by [email protected]Type

A security issue allows command injection on Securifi Almond, Almond+, and Almond 2015 devices with firmware AL-R096 when adding new port forwarding rules

Reporter	Title	Published	Views	Family All 7
Circl	CVE-2017-8331	19 Jun 201900:31	–	circl
CNVD	Securifi Almond Command Injection Vulnerability (CNVD-2019-18745)	19 Jun 201900:00	–	cnvd
CVE	CVE-2017-8331	18 Jun 201919:56	–	cve
Cvelist	CVE-2017-8331	18 Jun 201919:56	–	cvelist
EUVD	EUVD-2017-17292	7 Oct 202500:30	–	euvd
OSV	CVE-2017-8331	18 Jun 201920:15	–	osv
Prion	Command injection	18 Jun 201920:15	–	prion

NVD

Node

securifi almond_2015_firmwareMatchal-r096

AND

securifi almond_2015Match-

Node

securifi almond+firmwareMatchal-r096

AND

securifi almond+Match-

Node

securifi almond_firmwareMatchal-r096

AND

securifi almondMatch-

Source	Link
github	www.github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Securifi_Almond_plus_sec_issues.pdf
packetstormsecurity	www.packetstormsecurity.com/files/153227/Securifi-Almond-2015-Buffer-Overflow-Command-Injection-XSS-CSRF.html
seclists	www.seclists.org/bugtraq/2019/Jun/8

21 Nov 2024 03:33Current

9.1High risk

Vulners AI Score9.1

CVSS 26.5

CVSS 38.8

EPSS0.1332

CWE-77

securifi almond almond+almond 2015 firmware al-r096 command injection port forwarding system api binwalk cpio-root goahead mips ida pro