What’s Vulnerable › Vulnerabilities

CVE-2014-8872

• Severity: high (CVSS 7.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2017-08-29 · updated 2026-06-17
• Weakness: CWE-94

Description

Improper Verification of Cryptographic Signature in AVM FRITZ!Box 6810 LTE after firmware 5.22, FRITZ!Box 6840 LTE after firmware 5.23, and other models with firmware 5.50.

Affected products

• Avm Fritz!Box 6810 Lte Firmware: all versions
• Avm Fritz!Box 6840 Lte Firmware: all versions

References

• http://packetstormsecurity.com/files/130040/AVM-FRITZ-Box-Firmware-Signature-Bypass.html
• http://seclists.org/fulldisclosure/2015/Jan/86
• http://www.securityfocus.com/archive/1/534522/100/0/threaded
• http://packetstormsecurity.com/files/130040/AVM-FRITZ-Box-Firmware-Signature-Bypass.html
• http://seclists.org/fulldisclosure/2015/Jan/86
• http://www.securityfocus.com/archive/1/534522/100/0/threaded

Get alerted when CVE-2014-8872 or the next vulnerability affects your stack