CVE:CVE-2017-8332
CNNVD:CNNVD-201906-715
Securifi Almond是一款带有触控屏幕的无线路由器。
使用AL-R096版本固件的Securifi Almond、Almond+和Almond 2015中存在跨站脚本漏洞，该漏洞源于程序没有执行任意的跨站脚本保护机制。远程攻击者可利用该漏洞以admin用户身份控制设备，执行任意代码或更改用户密码。
solution:Upgrade securifi almond_2015_firmware to a higher version than al-r096,and avoid the version al-r096; Upgrade securifi almond+firmware to a higher version than al-r096,and avoid the version al-r096; Upgrade securifi almond_firmware to a higher version than al-r096,and avoid the version al-r096