PT-2019-8607 · Avm · Avm Fritz!Box 7490+1

Christian Kagerhuber · Published 2019-10-22 · Updated 2019-10-24 · CVE-2017-8087

Positive Technologies (AI Summary)

CVSS v3.1

2.4

Low

Base vector

AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions AVM Fritz!Box 7490 versions Fritz!OS 6.80 through 6.83

Description The issue allows physically proximate attackers to view slices of previously transmitted packets or portions of memory. This is due to information leakage in PPPoE packet padding.

Recommendations For AVM Fritz!Box 7490 with Firmware versions Fritz!OS 6.80 and 6.83, update to a version that contains a fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2017-8087

Affected Products

Avm Fritz!Box 7490

Fritz!Os

References · 6

• https://osv.dev/vulnerability/CVE-2017-8087 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-8087 · Security Note
• https://t.me/cibsecurity/7563 · Telegram Post
• http://fritzbox.com · Note
• http://seclists.org/fulldisclosure/2019/Oct/36 · Note
• http://avm.com · Note