CVE-2014-8886

AVM FRITZ!OS before 6.30 extracts the contents of firmware updates before verifying their cryptographic signature, which allows remote attackers to create…

published January 8, 2016

CVSS
—
EPSS
6%
Percentile
93.4
In the wild
Unconfirmed
What it is

AVM FRITZ!OS before 6.30 extracts the contents of firmware updates before verifying their cryptographic signature, which allows remote attackers to create symlinks or overwrite critical files, and consequently execute arbitrary code, via a crafted firmware image.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06137 · 93.4th percentile
Published
2016-01-08T20:00Z
EPSS history
Timeline
  • 08 JAN 20:00Z
    AVM FRITZ!OS before 6.30 extracts the contents of firmware updates before verifying their cryptographic signature, which allows remote attackers to create…
    cvelistv5