CVE-2017-8335

CVE-2017-8335 is a stack buffer overflow vulnerability affecting Securifi Almond, Almond+, and Almond 2015 devices running firmware AL-R096. The vulnerability arises from insufficient string length checks on the "mssid_1" POST parameter when setting wireless network names, allowing an attacker to send an oversized payload. This payload overflows a buffer during the processing of a request to view the Wi-Fi network name, enabling control over the $ra register and arbitrary code execution. Rated with a CVSS v3.0 score of 8.0 (High), this vulnerability has a network attack vector and low attack complexity, requiring user interaction (UI:R). A successful exploit could lead to complete compromise of the device (C:H, I:H, A:H). There is no evidence of active exploitation, and no public exploit code is available in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, indicating low public awareness.