Vulnerabilities

TI-2020-16316 CVE-2020-26887 · GHSA-fx9w-88ff-gqvq

FRITZ!OS before 7.21 on FRITZ!Box devices allows a bypass of a DNS Rebinding protection mechanism.

LOW 37

FRITZ!OS before 7.21 on FRITZ!Box devices allows a bypass of a DNS Rebinding protection mechanism.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01419 Published 2020-10-23 No fix listed

TI-2017-05675 CVE-2017-8087 · GHSA-m2hf-jhv9-29j2

Information Leakage in PPPoE Packet Padding in AVM Fritz!Box 7490 with Firmware versions…

LOW 12

Information Leakage in PPPoE Packet Padding in AVM Fritz!Box 7490 with Firmware versions Fritz!OS 6.80 and 6.83 allows physically proximate attackers to view slices of previously transmitted packets or portions of memory…

CVSS 3.1LOW 2.4 Physical No auth No interaction EPSS 0.00347 Published 2019-10-22 No fix listed CWE-200

TI-2014-07248 CVE-2014-8872 · GHSA-2h3v-8xgc-fcxp

Improper Verification of Cryptographic Signature in AVM FRITZ!Box 6810 LTE after firmware…

LOW 37

Improper Verification of Cryptographic Signature in AVM FRITZ!Box 6810 LTE after firmware 5.22, FRITZ!Box 6840 LTE after firmware 5.23, and other models with firmware 5.50.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.01503 Published 2017-08-28 No fix listed CWE-94

TI-2015-06014 CVE-2015-7242 · GHSA-65xx-2x9j-ccgr

Cross-site scripting (XSS) vulnerability in the Push-Service-Mails feature in AVM…

LOW 30

Cross-site scripting (XSS) vulnerability in the Push-Service-Mails feature in AVM FRITZ!OS before 6.30 allows remote attackers to inject arbitrary web script or HTML via the display name in the FROM field of an SIP INVIT…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01515 Published 2016-01-12 No fix listed CWE-79

TI-2014-07255 CVE-2014-8886 · GHSA-w6v8-ffc7-5f5p

AVM FRITZ!OS before 6.30 extracts the contents of firmware updates before verifying their…

MEDIUM 44

AVM FRITZ!OS before 6.30 extracts the contents of firmware updates before verifying their cryptographic signature, which allows remote attackers to create symlinks or overwrite critical files, and consequently execute ar…

CVSS 3.0HIGH 8.1 Network No auth No interaction EPSS 0.06137 Published 2016-01-08 No fix listed CWE-310

TI-2014-07906 CVE-2014-9727 · GHSA-xw24-98q7-5jvx

AVM Fritz!Box allows remote attackers to execute arbitrary commands via shell…

HIGH 81

AVM Fritz!Box allows remote attackers to execute arbitrary commands via shell metacharacters in the var:lang parameter to cgi-bin/webcm.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.72119 Published 2015-05-29 No fix listed CWE-78

TI-2007-00421 CVE-2007-0431 · GHSA-65xx-p5xg-82m7

AVM Fritz!Box 7050, and possibly other product models, allows remote attackers to cause a…

LOW 39

AVM Fritz!Box 7050, and possibly other product models, allows remote attackers to cause a denial of service (VoIP application crash) via a zero-length UDP packet to the SIP port (port 5060).

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.02448 Published 2007-01-23 No fix listed

TI-2000-00262 CVE-2000-0262 · GHSA-vx5q-wxf4-cq9p

The AVM KEN! ISDN Proxy server allows remote attackers to cause a denial of service via a malformed request.

LOW 33

The AVM KEN! ISDN Proxy server allows remote attackers to cause a denial of service via a malformed request.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.07277 Published 2000-07-12 No fix listed

TI-2000-00261 CVE-2000-0261 · GHSA-3pjj-9jv7-w6xw

The AVM KEN! web server allows remote attackers to read arbitrary files via a ..

LOW 26

The AVM KEN! web server allows remote attackers to read arbitrary files via a ..

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.0158 Published 2000-07-12 No fix listed

Vulnerabilities

Filters