CVE:CVE-2017-8328
CNNVD:CNNVD-201906-713
Securifi Almond是一款带有触控屏幕的无线路由器。
使用AL-R096版本固件的Securifi Almond、Almond+和Almond 2015中存在服务器端请求伪造漏洞。远程攻击者可利用该漏洞诱使用户修改用户密码。
solution:Upgrade securifi almond_2015_firmware to a higher version than al-r096,and avoid the version al-r096; Upgrade securifi almond+firmware to a higher version than al-r096,and avoid the version al-r096; Upgrade securifi almond_firmware to a higher version than al-r096,and avoid the version al-r096