rapid7/metasploit-framework — pull request #3193 by m-1-k-3 (2014-04-07 07:18:15+00:00)
Title: Fritz!box echo exploit

It is quite a while that some guys used a vulnerability in AVM fritz!box devices. (Report: http://www.heise.de/security/meldung/Angriffe-auf-Fritzboxen-AVM-empfiehlt-Abschaltung-der-Fernkonfiguration-2106542.html)

Because now everything is public I have created a Metasploit module. With this everyone should be able to test his boxes ...

First public documentation of the vulnerability is here: http://pastebin.com/GnMKGmZ2
A detailed writeup with a Metasploit PoC is here (Thx to Fabian Braeunlein from breaking.systems): http://breaking.systems/blog/2014/04/avm-fritzbox-root-rce-from-patch-to-metasploit-module-ii