CVE-2017-8336

CVE-2017-8336 describes a stack-based buffer overflow vulnerability in Securifi Almond, Almond+, and Almond 2015 devices running firmware AL-R096. An authenticated attacker can exploit this by crafting a malicious POST request to the device's route configuration, specifically overflowing the "gateway" parameter. This allows for control over the $ra register, leading to arbitrary code execution and full device compromise. The vulnerability is rated High severity (CVSS 8.8) due to its network-based attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.