high7.8Public exploit code
CVE-2020-26887
FRITZ!OS before 7.21 on FRITZ!Box devices allows a bypass of a DNS Rebinding protection mechanism.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- FRITZ!Box 7.20 - DNS Rebinding Protection Bypass2020-12-18 · remote · hardware
Impact
FRITZ!OS before 7.21 on FRITZ!Box devices allows a bypass of a DNS Rebinding protection mechanism.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Avm | Fritz\!Box 7490 Firmware | before 7.21 |
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/159606/FRITZ-Box-7.20-DNS-Rebinding-Protection-Bypass.html
- https://en.avm.de/news/
- https://www.redteam-pentesting.de/en/advisories/-advisories-publicised-vulnerability-analyses
- http://packetstormsecurity.com/files/159606/FRITZ-Box-7.20-DNS-Rebinding-Protection-Bypass.html
- https://en.avm.de/news/
- https://www.redteam-pentesting.de/en/advisories/-advisories-publicised-vulnerability-analyses