CVE:CVE-2017-8331
CNNVD:CNNVD-201906-711
Securifi Almond是一款带有触控屏幕的无线路由器。
使用AL-R096版本固件的Securifi Almond、Almond+和Almond 2015中的端口转发功能存在命令注入漏洞。攻击者可利用该漏洞提交恶意的payload并控制设备。
solution:Upgrade securifi almond_2015_firmware to a higher version than al-r096,and avoid the version al-r096; Upgrade securifi almond+firmware to a higher version than al-r096,and avoid the version al-r096; Upgrade securifi almond_firmware to a higher version than al-r096,and avoid the version al-r096