CVE-2014-9727

CVE-2014-9727 is a critical command injection vulnerability affecting AVM Fritz!Box devices, allowing unauthenticated remote attackers to execute arbitrary commands by injecting shell metacharacters into the var:lang parameter of cgi-bin/webcm. With a CVSS score of 10.0 and a FAUCET Risk Score of 100/100, this vulnerability presents a severe risk due to its network-based attack vector, low attack complexity, and complete compromise of confidentiality, integrity, and availability. While not listed in CISA KEV, exploit modules exist in Metasploit and ExploitDB, and it has garnered significant community discussion and media coverage, including its association with Mirai malware variants, indicating a high likelihood of exploitation.