PT-2017-6295 · Avm · Avm Fritz!Box+2

Published 2017-08-28 · Updated 2018-10-09 · CVE-2014-8872

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions AVM FRITZ!Box 6810 LTE versions 5.22 and later AVM FRITZ!Box 6840 LTE versions 5.23 and later Other AVM FRITZ!Box models version 5.50 and later

Description The issue is related to an improper verification of cryptographic signatures.

Recommendations For AVM FRITZ!Box 6810 LTE versions 5.22 and later, update to a version that includes a fix for the improper verification of cryptographic signatures. For AVM FRITZ!Box 6840 LTE versions 5.23 and later, update to a version that includes a fix for the improper verification of cryptographic signatures. For other AVM FRITZ!Box models version 5.50 and later, update to a version that includes a fix for the improper verification of cryptographic signatures.

Exploit

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2014-8872

Affected Products

Avm Fritz!Box

Avm Fritz!Box 6810 Lte

Avm Fritz!Box 6840 Lte

References · 4

• 🔥 http://seclists.org/fulldisclosure/2015/Jan/86 · Exploit
• 🔥 http://packetstormsecurity.com/files/130040/AVM-FRITZ-Box-Firmware-Signature-Bypass.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2014-8872 · Security Note
• http://securityfocus.com/archive/1/534522/100/0/threaded · Note