Free

Records7All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Free records in CISA KEV

No Free vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Freebox Delta Firmware 3 records MEDIUM Freebox Mini Firmware 3 records MEDIUM Freebox One Firmware 3 records MEDIUM Freebox Pop Firmware 3 records MEDIUM Freebox Revolution Firmware 3 records MEDIUM Freebox Os 2 records LOW Freebox Hd Firmware 1 record MEDIUM Freebox Server 1 record LOW

Records

7 records

TI-2020-14921 CVE-2020-24377 · GHSA-86qf-2vwh-94x2

A DNS rebinding vulnerability in the Freebox OS web interface in Freebox Server before 4.2.3.

MEDIUM 44

A DNS rebinding vulnerability in the Freebox OS web interface in Freebox Server before 4.2.3.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.0119 Published 2020-09-16 No fix listed CWE-20

TI-2020-14918 CVE-2020-24374 · GHSA-3fxq-98r3-r3g2

A DNS rebinding vulnerability in Freebox v5 before 1.5.29.

MEDIUM 44

A DNS rebinding vulnerability in Freebox v5 before 1.5.29.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.01165 Published 2020-09-16 No fix listed CWE-20

TI-2020-14920 CVE-2020-24376 · GHSA-hm8v-p29w-fjv8

A DNS rebinding vulnerability in the UPnP IGD implementations in Freebox v5 before 1.5.29…

MEDIUM 43

A DNS rebinding vulnerability in the UPnP IGD implementations in Freebox v5 before 1.5.29 and Freebox Server before 4.2.3.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00997 Published 2020-09-16 No fix listed CWE-20

TI-2020-14917 CVE-2020-24373 · GHSA-qcxc-9v45-h4hx

A CSRF vulnerability in the UPnP MediaServer implementation in Freebox Server before 4.2.3.

LOW 39

A CSRF vulnerability in the UPnP MediaServer implementation in Freebox Server before 4.2.3.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00535 Published 2020-09-16 No fix listed CWE-352

TI-2020-14919 CVE-2020-24375 · GHSA-vj4j-8p7g-7757

A DNS rebinding vulnerability in the UPnP MediaServer implementation in Freebox Server before 4.2.3.

LOW 31

A DNS rebinding vulnerability in the UPnP MediaServer implementation in Freebox Server before 4.2.3.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01076 Published 2020-10-19 No fix listed CWE-290

TI-2014-07613 CVE-2014-9382 · GHSA-qxcq-8hc9-7fhw

Freebox OS Web interface 3.0.2 has CSRF which can allow VPN user account creation

LOW 30

Freebox OS Web interface 3.0.2 has CSRF which can allow VPN user account creation

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00794 Published 2020-01-13 No fix listed CWE-352

TI-2014-07633 CVE-2014-9405 · GHSA-qrjx-wfph-47qh

A Cross-Site Scripting (XSS) vulnerability exists in the description field of an Download…

LOW 27

A Cross-Site Scripting (XSS) vulnerability exists in the description field of an Download RSS item or Contacts in Freebox OS Web interface 3.0.2, which allows malicious users to execute arbitrary code.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01505 Published 2020-01-06 No fix listed CWE-79

Open these records in search →

Critical	3
High	1
Medium	3
Low	0
No CVSS	0