How to Own a Router – Fritz!Box AVM Vulnerability Analysis

Tue, 11 Mar 2014 00:00:00 +0000

The below post was originally written on February 9th as a little educational exercise & follow-up to my BinDiff post. (This research was actually triggered by a relative asking about that strange Fritz!Box vulnerability he heard about on the radio). Once we realized the full potential of the bug we decided against publishing the post and contacted several parties instead. Amongst others this contributed to the German BSI press release. Given the cat is out of the bag now anyway, we see no reason to hold it back. We will further take this as an opportunity to lay out our basic vulnerability disclosure principles in a future post. This topic will also be discussed in the panel “Ethics of Security Work & Research” at Troopers

Fritz!Box on Insinuator.net - Bold Statements

How to Own a Router – Fritz!Box AVM Vulnerability Analysis