CVE-2015-7242

Cross-site scripting XSS vulnerability in the Push-Service-Mails feature in AVM FRITZ!OS before 6.30 allows remote attackers to inject arbitrary web script or HTML via the display name in the FROM field of an SIP INVITE message...

Cross site scripting

Cross-site scripting XSS vulnerability in the Push-Service-Mails feature in AVM FRITZ!OS before 6.30 allows remote attackers to inject arbitrary web script or HTML via the display name in the FROM field of an SIP INVITE message...

CVE-2015-7242

AVM FRITZ!OS

PT-2016-3744

Name of the Vulnerable Software and Affected Versions AVM FRITZ!OS versions prior to 6.30 Description A cross-site scripting XSS issue exists in the Push-Service-Mails feature, allowing remote attackers to inject arbitrary web script or HTML via the display name in the FROM field of an SIP INVITE...

CVE-2015-7242: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Push-Service-Mails feature in AVM FRITZ!OS before 6.30 allows remote attackers to inject arbitrary web script or HTML via the display name in the FROM field of an SIP INVITE message...

Code injection

AVM FRITZ!OS before 6.30 extracts the contents of firmware updates before verifying their cryptographic signature, which allows remote attackers to create symlinks or overwrite critical files, and consequently execute arbitrary code, via a crafted firmware image...

CVE-2014-8886

AVM FRITZ!OS before 6.30 extracts the contents of firmware updates before verifying their cryptographic signature, which allows remote attackers to create symlinks or overwrite critical files, and consequently execute arbitrary code, via a crafted firmware image...

CVE-2014-8886

AVM FRITZ!OS before 6.30 extracts the contents of firmware updates before verifying their cryptographic signature, which allows remote attackers to create symlinks or overwrite critical files, and consequently execute arbitrary code, via a crafted firmware image...

CVE-2014-8886

AVM FRITZ!OS before 6.30 is affected by a vulnerability where the firmware update package is extracted before cryptographic signature verification. This allows a remote attacker to create symlinks or overwrite critical files via a crafted firmware image, potentially leading to arbitrary code exec...

PT-2016-3501

Name of the Vulnerable Software and Affected Versions AVM FRITZ!OS versions prior to 6.30 Description The issue allows remote attackers to create symlinks or overwrite critical files, and consequently execute arbitrary code, via a crafted firmware image. This is possible because the firmware...

AVM FRITZ!OS HTML Injection

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Security Advisory ======================================================================= Title: HTML Injection Vulnerability Product: AVM FRITZ!OS Vulnerable Version: All versions prior to 6.30 Fixed Version: 6.30 CVE-ID: CVE-2015-7242 Impact: medium...

CVE-2014-8886: Undefined Security Weakness

AVM FRITZ!OS before 6.30 extracts the contents of firmware updates before verifying their cryptographic signature, which allows remote attackers to create symlinks or overwrite critical files, and consequently execute arbitrary code, via a crafted firmware image...

AVM FRITZ!Box / FRITZ!OS Detection Consolidation

Consolidation of AVM FRITZ!Box and FRITZ!OS detections. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...