PT-2015-5973 · Securifi · Securifi Almond+1

Joel Land · Published 2015-09-21 · Updated 2015-09-30 · CVE-2015-2915

Positive Technologies (AI Summary)

CVSS v2.0

7.3

High

Base vector

AV:A/AC:L/Au:N/C:P/I:P/A:C

Name of the Vulnerable Software and Affected Versions Securifi Almond devices versions prior to AL1-R201EXP10-L304-W34 Securifi Almond-2015 devices versions prior to AL2-R088M

Description The issue allows remote attackers to obtain web-management access by leveraging the ability to authenticate from the intranet, due to a default password of admin for the admin account.

Recommendations For Securifi Almond devices versions prior to AL1-R201EXP10-L304-W34, update the firmware to AL1-R201EXP10-L304-W34 or later. For Securifi Almond-2015 devices versions prior to AL2-R088M, update the firmware to AL2-R088M or later.

Fix

Weakness Enumeration

CWE-255

Related Identifiers

CVE-2015-2915

Affected Products

Securifi Almond

Securifi Almond-2015

References · 2

• http://kb.cert.org/vuls/id/906576 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2015-2915 · Security Note