PT-2019-8624 · Securifi · Securifi Almond+1

Mandar Satam · Published 2019-06-18 · Updated 2019-06-21 · CVE-2017-8337

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Securifi Almond version AL-R096 Securifi Almond+ version AL-R096 Securifi Almond 2015 version AL-R096

Description The issue allows an attacker to exploit the lack of Origin header check on the web management interface. This enables the attacker to trick a user into navigating to a malicious webpage, brute force the password, and execute actions such as managing rules and sensors attached to the devices using websocket requests.

Recommendations For Securifi Almond version AL-R096, consider disabling access to the web management interface until a patch is available. For Securifi Almond+ version AL-R096, restrict access to the websocket requests to minimize the risk of exploitation. For Securifi Almond 2015 version AL-R096, avoid using the web management interface for sensitive actions until the issue is resolved. As a temporary workaround, consider implementing additional security measures to prevent brute force attacks on the password for the web management interface.

Exploit

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2017-8337

Affected Products

Securifi Almond

Securifi Almond-2015

References · 6

• 🔥 https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Securifi_Almond_plus_sec_issues.pdf · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2017-8337 · Security Note
• https://osv.dev/vulnerability/CVE-2017-8337 · Vendor Advisory
• https://t.me/cibsecurity/4995 · Telegram Post
• https://seclists.org/bugtraq/2019/Jun/8 · Note
• http://packetstormsecurity.com/files/153227/Securifi-Almond-2015-Buffer-Overflow-Command-Injection-XSS-CSRF.html · Note