CVE-2017-8337

The CVE-2017-8337 entry concerns Securifi Almond/Almond+ (2015) devices on firmware AL-R096 where the web management interface does not enforce an Origin header check. This enables an attacker to lure a user to a malicious page, brute-forcing the device password via the web interface, and then pe...