Browse CVEs

HIGH 7.8 CVE-2020-26887 FRITZ!OS before 7.21 on FRITZ!Box devices allows a bypass of a DNS Rebinding protection mechanism. Fritz\!box 7490 Firmware 7.21+ Fix from $1,9502020-10-23 HIGH 7.8 CVE-2014-8872 Improper Verification of Cryptographic Signature in AVM FRITZ!Box 6810 LTE after firmware 5.22, FRITZ!Box 6840 LTE after firmware 5.23, and other mod… Fritz\!box 6810 Lte Firmware No fix yet Fix from $1,9502017-08-29 MEDIUM 6.1 CVE-2015-7242 Cross-site scripting (XSS) vulnerability in the Push-Service-Mails feature in AVM FRITZ!OS before 6.30 allows remote attackers to inject arbitrary we… Fritz\! Os after 6.23 Fix from $1,6002016-01-12 HIGH 8.1 CVE-2014-8886EPSS 6% AVM FRITZ!OS before 6.30 extracts the contents of firmware updates before verifying their cryptographic signature, which allows remote attackers to c… Fritz\! Os after 6.23 Fix from $1,9502016-01-08 HIGH 10.0 CVE-2014-9727EPSS 72% AVM Fritz!Box allows remote attackers to execute arbitrary commands via shell metacharacters in the var:lang parameter to cgi-bin/webcm. Fritz\!box Mitigation only Fix from $1,9502015-05-29 HIGH 7.8 CVE-2007-0431 AVM Fritz!Box 7050, and possibly other product models, allows remote attackers to cause a denial of service (VoIP application crash) via a zero-lengt… Fritzbox Mitigation only Fix from $1,9502007-01-23 MEDIUM 5.0 CVE-2000-0261 The AVM KEN! web server allows remote attackers to read arbitrary files via a .. (dot dot) attack. Ken Mitigation only Fix from $1,6002000-04-12 MEDIUM 5.0 CVE-2000-0262EPSS 7% The AVM KEN! ISDN Proxy server allows remote attackers to cause a denial of service via a malformed request. Ken No fix yet Fix from $1,6002000-04-12