CVE-2017-8329

CVE-2017-8329 describes a stack buffer overflow vulnerability in Securifi Almond, Almond+, and Almond 2015 devices running firmware AL-R096. The flaw arises from insufficient string length checks on the "mssid_1" POST parameter when setting wireless network names, allowing an attacker to send an oversized payload. This payload overflows a buffer when the device attempts to display the network name, enabling an attacker to control the $ra register and execute arbitrary code. The vulnerability carries a CVSS v3 score of 6.4 (Medium), indicating a high impact on confidentiality, integrity, and availability, but requiring high privileges and user interaction for exploitation. The attack vector is network-based, but the high attack complexity suggests it's not trivial to execute. There is no evidence of active exploitation, and no public exploit code (Metasploit, Nuclei, ExploitDB) or significant community discussion has been identified. This suggests the vulnerability is not widely known or actively targeted.