CVE-2024-54767
High
Description
An access control issue in the component /juis_boxinfo.xml of AVM FRITZ!Box 7530 AX v7.59 allows attackers to obtain sensitive information without authentication. NOTE: this is disputed by the Supplier because it cannot be reproduced, and the issue report focuses on an unintended configuration with direct Internet exposure.
SeverityHigh
CVSS7.5
Exploit probability79. percentile1.8%
ProductFRITZ!Box 7530 AX
PublishedJan 6, 2025
First seenJan 6, 2025
Weakness typeCWE-203CWE-203
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| AVM FRITZ!Box 7530 AX | 7.59 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.