PT-2015-5974 · Securifi · Securifi Almond+1
Joel Land
·
Published
2015-09-21
·
Updated
2015-09-30
·
CVE-2015-2916
CVSS v2.0
6.8
Medium
| Vector | AV:N/AC:M/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Securifi Almond devices versions prior to AL1-R201EXP10-L304-W34
Securifi Almond-2015 devices versions prior to AL2-R088M
Description
A cross-site request forgery issue allows remote attackers to hijack the authentication of arbitrary users.
Recommendations
For Securifi Almond devices with firmware before AL1-R201EXP10-L304-W34, update to firmware version AL1-R201EXP10-L304-W34 or later.
For Securifi Almond-2015 devices with firmware before AL2-R088M, update to firmware version AL2-R088M or later.
Fix
CSRF
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Securifi Almond
Securifi Almond-2015