Описание
AVM FRITZ!OS before 6.30 extracts the contents of firmware updates before verifying their cryptographic signature, which allows remote attackers to create symlinks or overwrite critical files, and consequently execute arbitrary code, via a crafted firmware image.
Ссылки
- Exploit
- Vendor Advisory
- Exploit
- Exploit
- Vendor Advisory
- Exploit
Уязвимые конфигурации
Конфигурация 1Версия до 6.23 (включая)
cpe:2.3:o:avm:fritz\!_os:*:*:*:*:*:*:*:*
EPSS
Процентиль: 89%
0.04543
Низкий
8.1 High
CVSS3
9.3 Critical
CVSS2
Дефекты
CWE-310
Связанные уязвимости
CVSS3: 8.1
github
больше 3 лет назад
AVM FRITZ!OS before 6.30 extracts the contents of firmware updates before verifying their cryptographic signature, which allows remote attackers to create symlinks or overwrite critical files, and consequently execute arbitrary code, via a crafted firmware image.
EPSS
Процентиль: 89%
0.04543
Низкий
8.1 High
CVSS3
9.3 Critical
CVSS2
Дефекты
CWE-310