CVE-2017-8333

CVE-2017-8333 describes a critical command injection vulnerability in Securifi Almond, Almond+, and Almond 2015 devices running firmware AL-R096. An authenticated attacker can exploit a flaw in the device's route addition functionality by manipulating POST parameters, specifically the "dest" parameter, to inject arbitrary commands into a "popen" function. This vulnerability carries a high CVSS score of 8.8, indicating a network-based attack with low complexity that can lead to complete compromise of confidentiality, integrity, and availability. While the vulnerability is severe, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding it.