Lucene search
MitreCVE-2014-9727HistoryMay 29, 2015 - 3:59 p.m.
CVE-2014-9727
2015-05-2915:59:02
CWE-78
mitre
web.nvd.nist.gov
78
In Wild
avm
fritz!box
remote code execution
cve-2014-9727
nvd
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
7.7
Confidence
Low
EPSS
0.969
Percentile
99.7%
AVM Fritz!Box allows remote attackers to execute arbitrary commands via shell metacharacters in the var:lang parameter to cgi-bin/webcm.
Affected configurations
Node
avmfritz\!box
| Vendor | Product | Version | CPE |
|---|---|---|---|
| avm | fritz\!box | * | cpe:2.3:a:avm:fritz\!box:*:*:*:*:*:*:*:* |
Related
exploitdb
exploitdb
Fritz!Box - Remote Command Execution
2014-05-01 00:00:00
checkpoint_advisories
checkpoint_advisories
AVM Fritz!Box Command Injection (CVE-2014-9727)
2021-01-25 00:00:00
attackerkb
attackerkb
CVE-2014-9727
2015-05-29 00:00:00
cvelist
cvelist
CVE-2014-9727
2015-05-29 15:00:00
nvd
nvd
CVE-2014-9727
2015-05-29 15:59:02
prion
prion
Design/Logic Flaw
2015-05-29 15:59:00
openvas
openvas
Speedport DSL-Router Multiple Vulnerabilities
2014-03-14 00:00:00
Multiple AVM FRITZ!Box Multiple Vulnerabilities - Version Check
2014-02-19 00:00:00
Multiple AVM FRITZ!Box Multiple Vulnerabilities - Active Check
2014-03-10 00:00:00
metasploit
metasploit
Fritz!Box Webcm Unauthenticated Command Injection
2014-04-07 07:12:22
securelist
securelist
Honeypots and the Internet of Things
2017-06-19 09:08:27
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
7.7
Confidence
Low
EPSS
0.969
Percentile
99.7%
Related for CVE-2014-9727