https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2017-8337.htmlhttps://patchthecve.com/cve/CVE-2017-8337.htmlWed, 17 Jun 2026 01:26:12 +0000HIGH 8.8: An issue was discovered on Securifi Almond, Almond+, and Almond 2015 devices with firmware AL-R096. The device provides a user with the capability of executing various actions on the web management interface. It seems that the device does not implement any Origin header check which allows an attackehttps://patchthecve.com/cve/CVE-2017-8334.htmlhttps://patchthecve.com/cve/CVE-2017-8334.htmlWed, 17 Jun 2026 01:26:11 +0000HIGH 8.0: An issue was discovered on Securifi Almond, Almond+, and Almond 2015 devices with firmware AL-R096. The device provides a user with the capability of blocking IP addresses using the web management interface. It seems that the device does not implement any cross-site scripting forgery protection mechhttps://patchthecve.com/cve/CVE-2017-8332.htmlhttps://patchthecve.com/cve/CVE-2017-8332.htmlWed, 17 Jun 2026 01:26:11 +0000HIGH 8.8: An issue was discovered on Securifi Almond, Almond+, and Almond 2015 devices with firmware AL-R096. The device provides a user with the capability of blocking key words passing in the web traffic to prevent kids from watching content that might be deemed unsafe using the web management interface. Ithttps://patchthecve.com/cve/CVE-2017-8330.htmlhttps://patchthecve.com/cve/CVE-2017-8330.htmlWed, 17 Jun 2026 01:26:11 +0000MEDIUM 6.5: An issue was discovered on Securifi Almond, Almond+, and Almond 2015 devices with firmware AL-R096. The device provides a UPnP functionality for devices to interface with the router and interact with the device. It seems that the "NewInMessage" SOAP parameter passed with a huge payload results in crhttps://patchthecve.com/cve/CVE-2017-8328.htmlhttps://patchthecve.com/cve/CVE-2017-8328.htmlWed, 17 Jun 2026 01:26:11 +0000HIGH 8.8: An issue was discovered on Securifi Almond, Almond+, and Almond 2015 devices with firmware AL-R096. The device provides a user with the capability of changing the administrative password for the web management interface. It seems that the device does not implement any cross site request forgery prothttps://patchthecve.com/cve/CVE-2017-8333.htmlhttps://patchthecve.com/cve/CVE-2017-8333.htmlWed, 17 Jun 2026 01:26:11 +0000HIGH 8.8: An issue was discovered on Securifi Almond, Almond+, and Almond 2015 devices with firmware AL-R096. The device provides a user with the capability of adding new routes to the device. It seems that the POST parameters passed in this request to set up routes on the device can be set in such a way thathttps://patchthecve.com/cve/CVE-2017-8331.htmlhttps://patchthecve.com/cve/CVE-2017-8331.htmlWed, 17 Jun 2026 01:26:11 +0000HIGH 8.8: An issue was discovered on Securifi Almond, Almond+, and Almond 2015 devices with firmware AL-R096. The device provides a user with the capability of adding new port forwarding rules to the device. It seems that the POST parameters passed in this request to set up routes on the device can be set in https://patchthecve.com/cve/CVE-2017-8329.htmlhttps://patchthecve.com/cve/CVE-2017-8329.htmlWed, 17 Jun 2026 01:26:11 +0000MEDIUM 6.4: An issue was discovered on Securifi Almond, Almond+, and Almond 2015 devices with firmware AL-R096. The device provides a user with the capability of setting a name for the wireless network. These values are stored by the device in NVRAM (Non-volatile RAM). It seems that the POST parameters passed ihttps://patchthecve.com/cve/CVE-2017-8336.htmlhttps://patchthecve.com/cve/CVE-2017-8336.htmlWed, 17 Jun 2026 01:26:12 +0000HIGH 8.8: An issue was discovered on Securifi Almond, Almond+, and Almond 2015 devices with firmware AL-R096. The device provides a user with the capability of adding new routes to the device. It seems that the POST parameters passed in this request to set up routes on the device can be set in such a way thathttps://patchthecve.com/cve/CVE-2017-8335.htmlhttps://patchthecve.com/cve/CVE-2017-8335.htmlWed, 17 Jun 2026 01:26:12 +0000HIGH 8.0: An issue was discovered on Securifi Almond, Almond+, and Almond 2015 devices with firmware AL-R096. The device provides a user with the capability of setting name for wireless network. These values are stored by the device in NVRAM (Non-volatile RAM). It seems that the POST parameters passed in this