Avm
7 CVEs across 11 Avm products. Browse Avm vulnerabilities, severities, and proof-of-concept exploits.
Avm products with known CVEs
Avm CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2020-26887 | High | 7.8 | 2020-10-23 | FRITZ!OS before 7.21 on FRITZ!Box devices allows a bypass of a DNS Rebinding protection mechanism. |
CVE-2017-8087 | Low | 2.4 | 2019-10-22 | Information Leakage in PPPoE Packet Padding in AVM Fritz!Box 7490 with Firmware versions Fritz!OS 6.80 and 6.83 allows physically proximate attackers to view s… |
CVE-2014-8872 | High | 7.8 | 2017-08-29 | Improper Verification of Cryptographic Signature in AVM FRITZ!Box 6810 LTE after firmware 5.22, FRITZ!Box 6840 LTE after firmware 5.23, and other models with f… |
CVE-2015-7242 | Medium | 6.1 | 2016-01-12 | Cross-site scripting (XSS) vulnerability in the Push-Service-Mails feature in AVM FRITZ!OS before 6.30 allows remote attackers to inject arbitrary web script o… |
CVE-2014-8886 | High | 8.1 | 2016-01-08 | AVM FRITZ!OS before 6.30 extracts the contents of firmware updates before verifying their cryptographic signature, which allows remote attackers to create syml… |
CVE-2014-9727 | | | 2015-05-29 | AVM Fritz!Box allows remote attackers to execute arbitrary commands via shell metacharacters in the var:lang parameter to cgi-bin/webcm. |
CVE-2007-0431 | | | 2007-01-23 | AVM Fritz!Box 7050, and possibly other product models, allows remote attackers to cause a denial of service (VoIP application crash) via a zero-length UDP pack… |
CVE-2000-0262 | | | 2000-04-12 | The AVM KEN! ISDN Proxy server allows remote attackers to cause a denial of service via a malformed request. |
CVE-2000-0261 | | | 2000-04-12 | The AVM KEN! web server allows remote attackers to read arbitrary files via a .. (dot dot) attack. |