critical10.0Public exploit code
CVE-2014-9727
AVM Fritz!Box allows remote attackers to execute arbitrary commands via shell metacharacters in the var:lang parameter to cgi-bin/webcm.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Fritz!Box - Remote Command Execution2014-05-01 · webapps · hardware
Impact
AVM Fritz!Box allows remote attackers to execute arbitrary commands via shell metacharacters in the var:lang parameter to cgi-bin/webcm.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Avm | Fritz\!Box | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.exploit-db.com/exploits/33136
- http://www.osvdb.org/103289
- https://www.trustwave.com/Resources/SpiderLabs-Blog/-Honeypot-Alert--Fritz%21Box-%E2%80%93-Remote-Command-Execution-Exploit-Attempt/
- http://www.exploit-db.com/exploits/33136
- http://www.osvdb.org/103289
- https://www.trustwave.com/Resources/SpiderLabs-Blog/-Honeypot-Alert--Fritz%21Box-%E2%80%93-Remote-Command-Execution-Exploit-Attempt/