CVE-2007-0357: Fritzdsl

Medium severity, CVSS 5.0. EPSS: 3.5% chance of exploitation in the next 30 days.

Directory traversal vulnerability in the AVM IGD CTRL Service in Fritz!DSL 02.02.29 allows remote attackers to read arbitrary files via ..%5C (URL-encoded dot dot backslash) sequences in a URI requested from the AR7 webserver.

Affected products

• Fritzdsl Fritzdsl: version 02.02.29 only

Published 2007-01-19. Last modified 2026-06-16.