PT-2015-5973 · Securifi · Securifi Almond+1

Joel Land · Publicado 2015-09-21 · Atualizado 2015-09-30 · CVE-2015-2915

Positive Technologies (AI Summary)

CVSS v2.0

7.3

Alta

Vetor base

AV:A/AC:L/Au:N/C:P/I:P/A:C

Name of the Vulnerable Software and Affected Versions Securifi Almond devices versions prior to AL1-R201EXP10-L304-W34 Securifi Almond-2015 devices versions prior to AL2-R088M

Description The issue allows remote attackers to obtain web-management access by leveraging the ability to authenticate from the intranet, due to a default password of admin for the admin account.

Recommendations For Securifi Almond devices versions prior to AL1-R201EXP10-L304-W34, update the firmware to AL1-R201EXP10-L304-W34 or later. For Securifi Almond-2015 devices versions prior to AL2-R088M, update the firmware to AL2-R088M or later.

Correção

Enumeração de Fraquezas

CWE-255

Identificadores relacionados

CVE-2015-2915

Produtos afetados

Securifi Almond

Securifi Almond-2015

Referências · 2

• http://kb.cert.org/vuls/id/906576 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2015-2915 · Nota de Segurança