PT-2015-5974 · Securifi · Securifi Almond+1

Joel Land · Publicado 2015-09-21 · Atualizado 2015-09-30 · CVE-2015-2916

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Securifi Almond devices versions prior to AL1-R201EXP10-L304-W34 Securifi Almond-2015 devices versions prior to AL2-R088M

Description A cross-site request forgery issue allows remote attackers to hijack the authentication of arbitrary users.

Recommendations For Securifi Almond devices with firmware before AL1-R201EXP10-L304-W34, update to firmware version AL1-R201EXP10-L304-W34 or later. For Securifi Almond-2015 devices with firmware before AL2-R088M, update to firmware version AL2-R088M or later.

Correção

CSRF

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

CVE-2015-2916

Produtos afetados

Securifi Almond

Securifi Almond-2015

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2015-2916 · Nota de Segurança
• http://kb.cert.org/vuls/id/906576 · Correção