VULNERABILITY INTELLIGENCE
CVE-2014-9727
CVSS score10 HIGH
EPSS probability72.12%
CISA KEVNot currently listed
Published2015-05-29
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Description
AVM Fritz!Box allows remote attackers to execute arbitrary commands via shell metacharacters in the var:lang parameter to cgi-bin/webcm.
Weakness classification
- CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')