exploitDog

CVE-2020-26887

Опубликовано: 23 окт. 2020

Источник: nvd

CVSS3: 7.8

CVSS2: 4.6

EPSS Низкий

Описание

FRITZ!OS before 7.21 on FRITZ!Box devices allows a bypass of a DNS Rebinding protection mechanism.

Ссылки

http://packetstormsecurity.com/files/159606/FRITZ-Box-7.20-DNS-Rebinding-Protection-Bypass.html
Exploit
Third Party Advisory
VDB Entry
https://en.avm.de/news/
Vendor Advisory
https://www.redteam-pentesting.de/en/advisories/-advisories-publicised-vulnerability-analyses
Third Party Advisory
http://packetstormsecurity.com/files/159606/FRITZ-Box-7.20-DNS-Rebinding-Protection-Bypass.html
Exploit
Third Party Advisory
VDB Entry
https://en.avm.de/news/
Vendor Advisory
https://www.redteam-pentesting.de/en/advisories/-advisories-publicised-vulnerability-analyses
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:avm:fritz\!box_7490_firmware:*:*:*:*:*:*:*:*

Версия до 7.21 (исключая)

cpe:2.3:h:avm:fritz\!box_7490:-:*:*:*:*:*:*:*

EPSS

Процентиль: 53%

0.00306

Низкий

7.8 High

CVSS3

4.6 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-fx9w-88ff-gqvq

github

больше 3 лет назад

FRITZ!OS before 7.21 on FRITZ!Box devices allows a bypass of a DNS Rebinding protection mechanism.

EPSS

Процентиль: 53%

0.00306

Низкий

7.8 High

CVSS3

4.6 Medium

CVSS2

Дефекты

NVD-CWE-noinfo