Securifi

Records15All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high9CVSS 7.0–8.9

Exploited now

Securifi records in CISA KEV

No Securifi vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Almond Firmware 15 records MEDIUM Almond+firmware 10 records MEDIUM Almond 2015 Firmware 10 records MEDIUM Almond-2015 Firmware 5 records LOW

Records

15 records

TI-2017-05890 CVE-2017-8333 · GHSA-xmqw-gc65-wj6q

An issue was discovered on Securifi Almond, Almond+, and Almond 2015 devices with…

MEDIUM 48

An issue was discovered on Securifi Almond, Almond+, and Almond 2015 devices with firmware AL-R096.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.07092 Published 2019-06-18 No fix listed CWE-77

TI-2017-05888 CVE-2017-8331 · GHSA-x974-95vh-vg74

An issue was discovered on Securifi Almond, Almond+, and Almond 2015 devices with…

MEDIUM 48

An issue was discovered on Securifi Almond, Almond+, and Almond 2015 devices with firmware AL-R096.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.06981 Published 2019-06-18 No fix listed CWE-77

TI-2017-05894 CVE-2017-8337 · GHSA-8m4v-q428-5f42

An issue was discovered on Securifi Almond, Almond+, and Almond 2015 devices with…

MEDIUM 43

An issue was discovered on Securifi Almond, Almond+, and Almond 2015 devices with firmware AL-R096.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.02597 Published 2019-06-18 No fix listed CWE-200

TI-2017-05893 CVE-2017-8336 · GHSA-pv4f-9pgh-pj73

An issue was discovered on Securifi Almond, Almond+, and Almond 2015 devices with…

MEDIUM 43

An issue was discovered on Securifi Almond, Almond+, and Almond 2015 devices with firmware AL-R096.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.0264 Published 2019-06-18 No fix listed CWE-119

TI-2017-05889 CVE-2017-8332 · GHSA-jx8c-58rg-6cqq

An issue was discovered on Securifi Almond, Almond+, and Almond 2015 devices with…

MEDIUM 43

An issue was discovered on Securifi Almond, Almond+, and Almond 2015 devices with firmware AL-R096.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.02877 Published 2019-06-18 No fix listed CWE-79

TI-2017-05885 CVE-2017-8328 · GHSA-2898-phr2-m6mc

An issue was discovered on Securifi Almond, Almond+, and Almond 2015 devices with…

MEDIUM 41

An issue was discovered on Securifi Almond, Almond+, and Almond 2015 devices with firmware AL-R096.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.01372 Published 2019-06-18 No fix listed CWE-352

TI-2017-05892 CVE-2017-8335 · GHSA-8gcv-7mx7-pfhc

An issue was discovered on Securifi Almond, Almond+, and Almond 2015 devices with…

LOW 39

An issue was discovered on Securifi Almond, Almond+, and Almond 2015 devices with firmware AL-R096.

CVSS 3.0HIGH 8.0 Network Low privileges User interaction EPSS 0.02039 Published 2019-06-18 No fix listed CWE-119

TI-2017-05891 CVE-2017-8334 · GHSA-j53j-qm84-j458

An issue was discovered on Securifi Almond, Almond+, and Almond 2015 devices with…

LOW 37

An issue was discovered on Securifi Almond, Almond+, and Almond 2015 devices with firmware AL-R096.

CVSS 3.0HIGH 8.0 Network Low privileges User interaction EPSS 0.00911 Published 2019-06-18 No fix listed CWE-352

TI-2015-02573 CVE-2015-2915 · GHSA-x9jx-5p7h-ffwv

Securifi Almond devices with firmware before AL1-R201EXP10-L304-W34 and Almond-2015…

LOW 34

Securifi Almond devices with firmware before AL1-R201EXP10-L304-W34 and Almond-2015 devices with firmware before AL2-R088M have a default password of admin for the admin account, which allows remote attackers to obtain w…

CVSS 2.0HIGH 7.3 Adjacent network No auth Interaction — EPSS 0.00862 Published 2015-09-21 No fix listed CWE-255

TI-2017-05887 CVE-2017-8330 · GHSA-jfgg-vc2q-w48v

An issue was discovered on Securifi Almond, Almond+, and Almond 2015 devices with…

LOW 32

An issue was discovered on Securifi Almond, Almond+, and Almond 2015 devices with firmware AL-R096.

CVSS 3.0MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.01478 Published 2019-06-18 No fix listed CWE-20

TI-2017-05886 CVE-2017-8329 · GHSA-v83v-wx49-5j6m

An issue was discovered on Securifi Almond, Almond+, and Almond 2015 devices with…

LOW 32

An issue was discovered on Securifi Almond, Almond+, and Almond 2015 devices with firmware AL-R096.

CVSS 3.0MEDIUM 6.4 Network High privileges User interaction EPSS 0.01974 Published 2019-06-18 No fix listed CWE-119

TI-2015-02574 CVE-2015-2916 · GHSA-gc82-mj7f-7jgc

Cross-site request forgery (CSRF) vulnerability on Securifi Almond devices with firmware…

LOW 31

Cross-site request forgery (CSRF) vulnerability on Securifi Almond devices with firmware before AL1-R201EXP10-L304-W34 and Almond-2015 devices with firmware before AL2-R088M allows remote attackers to hijack the authenti…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.0066 Published 2015-09-21 No fix listed CWE-352

TI-2015-02572 CVE-2015-2914 · GHSA-qq45-89xg-7jpj

Securifi Almond devices with firmware before AL1-R201EXP10-L304-W34 and Almond-2015…

LOW 26

Securifi Almond devices with firmware before AL1-R201EXP10-L304-W34 and Almond-2015 devices with firmware before AL2-R088M use a fixed source-port number in outbound DNS queries performed on behalf of any device, which m…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01521 Published 2015-09-21 No fix listed

TI-2015-06068 CVE-2015-7296 · GHSA-rxh5-g4jr-gfxr

Securifi Almond devices with firmware before AL1-R201EXP10-L304-W34 and Almond-2015…

LOW 23

Securifi Almond devices with firmware before AL1-R201EXP10-L304-W34 and Almond-2015 devices with firmware before AL2-R088M use a linear algorithm for selecting the ID value in the header of a DNS query performed on behal…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01237 Published 2015-09-21 No fix listed

TI-2015-02575 CVE-2015-2917 · GHSA-m8m6-9f93-23c4

Securifi Almond devices with firmware before AL1-R201EXP10-L304-W34 and Almond-2015…

LOW 22

Securifi Almond devices with firmware before AL1-R201EXP10-L304-W34 and Almond-2015 devices with firmware before AL2-R088M unintentionally omit the X-Frame-Options HTTP header, which makes it easier for remote attackers…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.009 Published 2015-09-21 No fix listed CWE-20

Open these records in search →

Critical	0
High	9
Medium	6
Low	0
No CVSS	0