Is CVE-2024-54767 being exploited in the wild?

It is not listed in any known-exploited vulnerabilities catalog.

Is CVE-2024-54767 in the CISA KEV catalog?

No, it is not currently listed in the CISA Known Exploited Vulnerabilities catalog.

Is there a public exploit for CVE-2024-54767?

Public exploit code is available.

Is there a fix for CVE-2024-54767?

No fixed version is listed yet; check the vendor advisory for mitigations.

How urgently should CVE-2024-54767 be patched?

Brandefense priority: patch immediately, because public exploit code exists for a high-severity flaw.

Request A Demo

Vulnerability Intelligence

CVE-2024-54767

HighPublic exploit

An access control issue in the component /juis_boxinfo.xml of AVM FRITZ!Box 7530 AX v7.59 allows attackers to obtain sensitive information without authentication.

Published Jan 6, 2025 · Updated Apr 14, 2026

Key Facts

Patch immediately

CVE-2024-54767 is a high-severity vulnerability (CVSS 7.5 v3.1).
It is not listed in any known-exploited vulnerabilities catalog. Public exploit code is available.
EPSS estimates a 1.8% probability of exploitation in the next 30 days.
No fixed version is listed yet; check the vendor advisory for mitigations.
Brandefense priority: patch immediately, because public exploit code exists for a high-severity flaw.

CVSS v3.1

7.5

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS (30-day exploit likelihood)

1.8%

Higher than 78.7% of all scored CVEs

Exploited in the wild

No known

Not in a known-exploited catalog

Public exploit code

Available

Proof-of-concept or weaponized module

Get the full CVE-2024-54767 brief as a PDF

Every affected product and fixed release, exploitation status and a first 24 hours response checklist, emailed within minutes.

Description

An access control issue in the component /juis_boxinfo.xml of AVM FRITZ!Box 7530 AX v7.59 allows attackers to obtain sensitive information without authentication. NOTE: this is disputed by the Supplier because it cannot be reproduced, and the issue report focuses on an unintended configuration with direct Internet exposure.

Timeline

Publicly disclosed
Jan 6, 2025
Last updated
Apr 14, 2026

Weakness Type

CWE-203 Observable Discrepancy

References

otherhttps://github.com/Shuanunio/CVE_Requests/issues/1

FAQ

Common Questions.

An access control issue in the component /juis_boxinfo.xml of AVM FRITZ!Box 7530 AX v7.59 allows attackers to obtain sensitive information without authentication.
It is not listed in any known-exploited vulnerabilities catalog.
No, it is not currently listed in the CISA Known Exploited Vulnerabilities catalog.
Public exploit code is available.
No fixed version is listed yet; check the vendor advisory for mitigations.
Brandefense priority: patch immediately, because public exploit code exists for a high-severity flaw.

Is CVE-2024-54767 Running On Your Attack Surface?

Brandefense maps vulnerabilities like this one to your internet-facing assets and tells you exactly where to patch.