94 matches found
CVE-2014-9727
AVM Fritz!Box allows remote attackers to execute arbitrary commands via shell metacharacters in the var:lang parameter to cgi-bin/webcm...
Design/Logic Flaw
AVM Fritz!Box allows remote attackers to execute arbitrary commands via shell metacharacters in the var:lang parameter to cgi-bin/webcm...
CVE-2014-9727
AVM Fritz!Box allows remote attackers to execute arbitrary commands via shell metacharacters in the var:lang parameter to cgi-bin/webcm...
CVE-2014-9727
The CVE-2014-9727 issue affects AVM Fritz!Box routers, where the CGI endpoint cgi-bin/webcm accepts the var:lang parameter and does not properly filter shell metacharacters, enabling remote command execution. Impact is remote, unauthenticated command execution against affected devices, with shell...
CVE-2014-9727: Improper Neutralization of Special Elements used in an OS Command
AVM Fritz!Box allows remote attackers to execute arbitrary commands via shell metacharacters in the var:lang parameter to cgi-bin/webcm...
PT-2015-4366 · Avm · Avm Fritz!Box
Name of the Vulnerable Software and Affected Versions: AVM Fritz!Box affected versions not specified Description: The issue allows remote attackers to execute arbitrary commands. This is achieved by using shell metacharacters in the var:lang parameter to the "cgi-bin/webcm" API endpoint...
CVE-2014-9727
AVM Fritz!Box allows remote attackers to execute arbitrary commands via shell metacharacters in the var:lang parameter to cgi-bin/webcm. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...
AVM FRITZ!Box protection bypass
Image integrity protection bypass...
[RT-SA-2014-010] AVM FRITZ!Box Firmware Signature Bypass
Advisory: AVM FRITZ!Box: Firmware Signature Bypass The signature check of FRITZ!Box firmware images is flawed. Malicious code can be injected into firmware images without breaking the RSA signature. The code will be executed either if a manipulated firmware image is uploaded by the victim or if t...
AVM FRITZ!Box Firmware Signature Bypass Vulnerability
The signature check of FRITZ!Box firmware images is flawed. Malicious code can be injected into firmware images without breaking the RSA signature. The code will be executed either if a manipulated firmware image is uploaded by the victim or if the victim confirms an update on the webinterface...
AVM FRITZ!Box Firmware Signature Bypass
Advisory: AVM FRITZ!Box: Firmware Signature Bypass The signature check of FRITZ!Box firmware images is flawed. Malicious code can be injected into firmware images without breaking the RSA signature. The code will be executed either if a manipulated firmware image is uploaded by the victim or if t...
FritzBox Webcm Unauthenticated Command Injection
A remote command injection vulnerability has been reported in different Fritz!Box devices. The vulnerability is due to insufficient validation within the web-based Interface. A remote attacker can exploit this vulnerability by submitting a maliciously crafted request to the web-based Interface...
[SECURITY] Fedora 20 Update: ffgtk-0.8.6-7.fc20
Fritz Fun ffgtk is a clean solution for controlling the FRITZ!Box or compatible router with Linux. It offers a rich feature list, including call er monitor and fax support. It offers integration with the KDE, evolution and Thurderbird address books. Some plug-ins are packaged separately...
Fritz!Box - Remote Command Execution Exploit
No description provided by source. App : Fritz!Box Author : 0x4148 Fritz!Box is Networking/voice Over ip router produced by AVM it suffer from Unauthenticated remote command execution flaw Poc : https://ip/cgi-bin/webcm?getpage=../html/menus/menu2.html&var:lang=%26%20cat%20/var/flash/voip.cfg%20%...
Fritz!Box Webcm Unauthenticated Command Injection
No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 Msf::Exploit::Remote Rank = ExcellentRanking include Msf::Exploit::Remote::HttpClient include...
Fritz!Box路由器远程命令执行
Fritz!Box 路由器有一处未授权访问的命令执行漏洞。 0 未知 暂时没有解决方案 https://ip/cgi-bin/webcm?getpage=../html/menus/menu2.html&var:lang=%26%20cat%20/var/flash/voip.cfg%20%26...
Fritz!Box - Remote Command Execution Exploit
Exploit for hardware platform in category web applications App : Fritz!Box Author : 0x4148 Fritz!Box is Networking/voice Over ip router produced by AVM it suffer from Unauthenticated remote command execution flaw Poc :...
Fritz!Box - Remote Command Execution
App : Fritz!Box Author : 0x4148 Fritz!Box is Networking/voice Over ip router produced by AVM it suffer from Unauthenticated remote command execution flaw Poc : https://ip/cgi-bin/webcm?getpage=../html/menus/menu2.html&var:lang=%26%20cat%20/var/flash/voip.cfg%20%26 0x4148rise...
Fritz!Box - Remote Command Execution
Fritz!Box - Remote Command Execution App : Fritz!Box Author : 0x4148 Fritz!Box is Networking/voice Over ip router produced by AVM it suffer from Unauthenticated remote command execution flaw Poc :...
Fritz!Box Webcm - Command Injection (Metasploit)
This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Fritz!Box Webcm Unauthenticated Command Injection', 'Description' = %q Different Fritz!Box devices are vulnerable to an unauthenticat...