PT-2019-8607 · Avm · Avm Fritz!Box 7490+1

Christian Kagerhuber · Publicado 2019-10-22 · Atualizado 2019-10-24 · CVE-2017-8087

Positive Technologies (AI Summary)

CVSS v3.1

2.4

Baixa

Vetor base

AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions AVM Fritz!Box 7490 versions Fritz!OS 6.80 through 6.83

Description The issue allows physically proximate attackers to view slices of previously transmitted packets or portions of memory. This is due to information leakage in PPPoE packet padding.

Recommendations For AVM Fritz!Box 7490 with Firmware versions Fritz!OS 6.80 and 6.83, update to a version that contains a fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2017-8087

Produtos afetados

Avm Fritz!Box 7490

Fritz!Os

Referências · 6

• https://t.me/cibsecurity/7563 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2017-8087 · Aviso do Fabricante
• http://fritzbox.com · Nota
• http://seclists.org/fulldisclosure/2019/Oct/36 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-8087 · Nota de Segurança
• http://avm.com · Nota