CVE-2015-2917

Name: CVE-2015-2917
Creator: NVD / NIST
Published: 2015-09-21T10:59:05.46+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 0.90%

Last modified Jun 17, 2026

CVE-2015-2917 is a vulnerability of currently unknown severity. Securifi Almond devices with firmware before AL1-R201EXP10-L304-W34 and Almond-2015 devices with firmware before AL2-R088M unintentionally omit the X-Frame-Options HTTP header, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site that contains a (1) FRAME, (2) IFRAME, or (3) OBJECT element.. EPSS estimates a 0.90% chance of exploitation in the next 30 days.

Description

Securifi Almond devices with firmware before AL1-R201EXP10-L304-W34 and Almond-2015 devices with firmware before AL2-R088M unintentionally omit the X-Frame-Options HTTP header, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site that contains a (1) FRAME, (2) IFRAME, or (3) OBJECT element.

Metrics

EPSS Probability

0.90%

55.0th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-20

Affected Software

Vendor	Product	Versions
Securifi	Almond Firmware	<= al1-r201exp10-l304-w33
Securifi	Almond-2015 Firmware	<= al2-r088

References

http://www.kb.cert.org/vuls/id/906576Patch, Third Party Advisory, US Government Resource
http://www.kb.cert.org/vuls/id/906576Patch, Third Party Advisory, US Government Resource

Timeline

Published: Sep 21, 2015
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2015-2917?

How severe is CVE-2015-2917?

Severity scoring for CVE-2015-2917 is pending analysis. The EPSS model estimates a 0.90% probability of exploitation in the next 30 days.

How do I fix CVE-2015-2917?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2015-2917?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST