PT-2015-5975 · Securifi · Securifi Almond+1

Joel Land · Publicado 2015-09-21 · Atualizado 2015-09-30 · CVE-2015-2917

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Securifi Almond devices with firmware prior to AL1-R201EXP10-L304-W34 Securifi Almond-2015 devices with firmware prior to AL2-R088M

Description The issue makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site that contains a FRAME, IFRAME, or OBJECT element, due to the unintentional omission of the X-Frame-Options HTTP header.

Recommendations For Securifi Almond devices with firmware prior to AL1-R201EXP10-L304-W34, update the firmware to AL1-R201EXP10-L304-W34 or later. For Securifi Almond-2015 devices with firmware prior to AL2-R088M, update the firmware to AL2-R088M or later.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2015-2917

Produtos afetados

Securifi Almond

Securifi Almond-2015

Referências · 2

• http://kb.cert.org/vuls/id/906576 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2015-2917 · Nota de Segurança