CVE:CVE-2015-2916
CNNVD:CNNVD-201509-202
Securifi Almond是Securifi公司的一款无线路由器产品。
使用al1-r201exp10-l304-w33及之前版本固件的Securifi Almond设备和使用al2-r088及之前版本固件的Almond-2015设备中存在跨站请求伪造漏洞。远程攻击者可利用该漏洞执行未授权操作。
solution:Upgrade securifi almond-2015_firmware to a higher version than al2-r088,and avoid the version (,al2-r088]; Upgrade securifi almond_firmware to a higher version than al1-r201exp10-l304-w33,and avoid the version (,al1-r201exp10-l304-w33]