CVE-2014-8886

Published: Jan 8, 2016Modified: May 6, 2026

8.1

Vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.2 / Impact: 5.9

Source: NVD

Description

AVM FRITZ!OS before 6.30 extracts the contents of firmware updates before verifying their cryptographic signature, which allows remote attackers to create symlinks or overwrite critical files, and consequently execute arbitrary code, via a crafted firmware image.

Affected (1)

Products: Avm: Fritz! Os

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Avm Fritz! Os	Up to 6.23

Related CWEs

References (10)

http://packetstormsecurity.com/files/135161/AVM-FRITZ-Box-Arbitrary-Code-Execution-Via-Firmware-Images.html

Source: cve@mitre.org

http://seclists.org/fulldisclosure/2016/Jan/12

Source: cve@mitre.org

Exploit

http://www.securityfocus.com/archive/1/537246/100/0/threaded

Source: cve@mitre.org

https://avm.de/service/sicherheitsinfos-zu-updates/

Source: cve@mitre.org

Vendor Advisory

https://www.redteam-pentesting.de/advisories/rt-sa-2014-014

Source: cve@mitre.org

Exploit

http://packetstormsecurity.com/files/135161/AVM-FRITZ-Box-Arbitrary-Code-Execution-Via-Firmware-Images.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://seclists.org/fulldisclosure/2016/Jan/12

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://www.securityfocus.com/archive/1/537246/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

https://avm.de/service/sicherheitsinfos-zu-updates/

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://www.redteam-pentesting.de/advisories/rt-sa-2014-014

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

Timeline

No history available yet.