CVE-2017-8334

An issue was discovered on Securifi Almond, Almond+, and Almond 2015 devices with firmware AL-R096. The device provides a user with the capability of blocking IP addresses using the web management interface. It seems that the device does not implement any cross-site scripting forgery protection mechanism which allows an attacker to trick a user who is logged in to the web management interface into executing a cross-site scripting payload on the user's browser and execute any action on the device provided by the web management interface.

• CWE-352

• http://packetstormsecurity.com/files/153227/Securifi-Almond-2015-Buffer-Overflow-Command-Injection-XSS-CSRF.htmlThird Party Advisory, VDB Entry
• https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Securifi_Almond_plus_sec_issues.pdfExploit, Third Party Advisory
• https://seclists.org/bugtraq/2019/Jun/8Mailing List, Third Party Advisory
• http://packetstormsecurity.com/files/153227/Securifi-Almond-2015-Buffer-Overflow-Command-Injection-XSS-CSRF.htmlThird Party Advisory, VDB Entry
• https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Securifi_Almond_plus_sec_issues.pdfExploit, Third Party Advisory
• https://seclists.org/bugtraq/2019/Jun/8Mailing List, Third Party Advisory

Published

Jun 18, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-8328An issue was discovered on Securifi Almond, Almond+, and Alm…
• CVE-2017-8329An issue was discovered on Securifi Almond, Almond+, and Alm…
• CVE-2017-8330An issue was discovered on Securifi Almond, Almond+, and Alm…
• CVE-2017-8331An issue was discovered on Securifi Almond, Almond+, and Alm…
• CVE-2017-8332An issue was discovered on Securifi Almond, Almond+, and Alm…
• CVE-2017-8333An issue was discovered on Securifi Almond, Almond+, and Alm…
• CVE-2017-8335An issue was discovered on Securifi Almond, Almond+, and Alm…
• CVE-2017-8336An issue was discovered on Securifi Almond, Almond+, and Alm…
• CVE-2017-8337An issue was discovered on Securifi Almond, Almond+, and Alm…
• CVE-2017-8338A vulnerability in MikroTik Version 6.38.5 could allow an un…
• CVE-2017-8339PSKMAD.sys in Panda Free Antivirus 18.0 allows local users t…5.5
• CVE-2017-8340Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected…