avm kayıtları
avm üreticisine ait 9 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 1 · %11,1
- Pre-auth RCE
- 2
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-310 Cryptographic Issues1
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
- CWE-94 Improper Control of Generation of Code ('Code Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
9 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
62Bu hafta | CVE-2014-9727Silahlaştırılmış | AVM Fritz!Box allows remote attackers to execute arbitrary commands via shell metacharacters in the var:lang parameter to cgi-bin/webcm.avm · fritz\!box · CWE-78 | Kritik10,0 | — | %71,7 | 29 May 2015 |
34İzleyin | CVE-2014-8886İstismar yok | AVM FRITZ!OS before 6.30 extracts the contents of firmware updates before verifying their cryptographic signature, which allows remote attacavm · fritz\! os · CWE-310 | Yüksek8,1 | — | %6,1 | 8 Oca 2016 |
32İzleyin | CVE-2007-0431İstismar yok | AVM Fritz!Box 7050, and possibly other product models, allows remote attackers to cause a denial of service (VoIP application crash) via a zavm · fritzbox | Yüksek7,8 | — | %2,4 | 22 Oca 2007 |
31İzleyin | CVE-2014-8872İstismar yok | Improper Verification of Cryptographic Signature in AVM FRITZ!Box 6810 LTE after firmware 5.22, FRITZ!Box 6840 LTE after firmware 5.23, and avm · fritz\!box 6810 lte firmware · CWE-94 | Yüksek7,8 | — | %1,5 | 28 Ağu 2017 |
31İzleyin | CVE-2020-26887Kavram kanıtı | FRITZ!OS before 7.21 on FRITZ!Box devices allows a bypass of a DNS Rebinding protection mechanism.avm · fritz\!box 7490 firmware | Yüksek7,8 | — | %1,4 | 23 Eki 2020 |
24İzleyin | CVE-2015-7242İstismar yok | Cross-site scripting (XSS) vulnerability in the Push-Service-Mails feature in AVM FRITZ!OS before 6.30 allows remote attackers to inject arbavm · fritz\! os · CWE-79 | Orta6,1 | — | %1,5 | 12 Oca 2016 |
22İzleyin | CVE-2000-0262Kavram kanıtı | The AVM KEN! ISDN Proxy server allows remote attackers to cause a denial of service via a malformed request.avm · ken | Orta5,0 | — | %7,3 | 12 Nis 2000 |
20İzleyin | CVE-2000-0261İstismar yok | The AVM KEN! web server allows remote attackers to read arbitrary files via a ..avm · ken | Orta5,0 | — | %1,6 | 12 Nis 2000 |
9İzleyin | CVE-2017-8087İstismar yok | Information Leakage in PPPoE Packet Padding in AVM Fritz!Box 7490 with Firmware versions Fritz!OS 6.80 and 6.83 allows physically proximate avm · fritz\!os · CWE-200 | Düşük2,4 | — | %0,3 | 22 Eki 2019 |
- CVE-2014-972762Bu hafta
AVM Fritz!Box allows remote attackers to execute arbitrary commands via shell metacharacters in the var:lang parameter to cgi-bin/webcm.
KritikCVSS 10,0SilahlaştırılmışEPSS %72avm · fritz\!box29 May 2015
- CVE-2014-888634İzleyin
AVM FRITZ!OS before 6.30 extracts the contents of firmware updates before verifying their cryptographic signature, which allows remote attac
YüksekCVSS 8,1İstismar yokEPSS %6avm · fritz\! os8 Oca 2016
- CVE-2007-043132İzleyin
AVM Fritz!Box 7050, and possibly other product models, allows remote attackers to cause a denial of service (VoIP application crash) via a z
YüksekCVSS 7,8İstismar yokEPSS %2avm · fritzbox22 Oca 2007
- CVE-2014-887231İzleyin
Improper Verification of Cryptographic Signature in AVM FRITZ!Box 6810 LTE after firmware 5.22, FRITZ!Box 6840 LTE after firmware 5.23, and
YüksekCVSS 7,8İstismar yokEPSS %2avm · fritz\!box 6810 lte firmware28 Ağu 2017
- CVE-2020-2688731İzleyin
FRITZ!OS before 7.21 on FRITZ!Box devices allows a bypass of a DNS Rebinding protection mechanism.
YüksekCVSS 7,8Kavram kanıtıEPSS %1avm · fritz\!box 7490 firmware23 Eki 2020
- CVE-2015-724224İzleyin
Cross-site scripting (XSS) vulnerability in the Push-Service-Mails feature in AVM FRITZ!OS before 6.30 allows remote attackers to inject arb
OrtaCVSS 6,1İstismar yokEPSS %2avm · fritz\! os12 Oca 2016
- CVE-2000-026222İzleyin
The AVM KEN! ISDN Proxy server allows remote attackers to cause a denial of service via a malformed request.
OrtaCVSS 5,0Kavram kanıtıEPSS %7avm · ken12 Nis 2000
- CVE-2000-026120İzleyin
The AVM KEN! web server allows remote attackers to read arbitrary files via a ..
OrtaCVSS 5,0İstismar yokEPSS %2avm · ken12 Nis 2000
- CVE-2017-80879İzleyin
Information Leakage in PPPoE Packet Padding in AVM Fritz!Box 7490 with Firmware versions Fritz!OS 6.80 and 6.83 allows physically proximate
DüşükCVSS 2,4İstismar yokEPSS %0avm · fritz\!os22 Eki 2019