Fritz\!box CVEs and Security Vulnerabilities

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

CVE-2014-8872

Improper Verification of Cryptographic Signature in AVM FRITZ!Box 6810 LTE after firmware 5.22, FRITZ!Box 6840 LTE after firmware 5.23, and other models with firmware 5.50.

CVSS 3.0 · 7.8 High EPSS 1.5% KEV · Not listed

Vendors

Avm

Products

Fritz\!box 6810 Lte Fritz\!box 6810 Lte Firmware Fritz\!box 6840 Lte and 1 more

CVE-2014-9727

AVM Fritz!Box allows remote attackers to execute arbitrary commands via shell metacharacters in the var:lang parameter to cgi-bin/webcm.

CVSS 2.0 · 10.0 Critical EPSS 72.1% KEV · Not listed

Vendors

Avm

Products

Fritz\!box

CVE-2020-26887

FRITZ!OS before 7.21 on FRITZ!Box devices allows a bypass of a DNS Rebinding protection mechanism.

CVSS 3.1 · 7.8 High EPSS 1.4% KEV · Not listed

Vendors

Avm

Products

Fritz\!box 7490 Fritz\!box 7490 Firmware

CVE-2017-8087

Information Leakage in PPPoE Packet Padding in AVM Fritz!Box 7490 with Firmware versions Fritz!OS 6.80 and 6.83 allows physically proximate attackers to view slices of previously transmitted packets or portions of memory via via unspecified vectors.

CVSS 3.1 · 2.4 Low EPSS < 1% KEV · Not listed

Vendors

Avm

Products

Fritz\!box 7490 Fritz\!os

Page 1 of 1.