Free

Records7All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Free records in CISA KEV

No Free vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records in Freebox Mini Firmware · all components

TI-2020-14921 CVE-2020-24377 · GHSA-86qf-2vwh-94x2

MEDIUM 44

A DNS rebinding vulnerability in the Freebox OS web interface in Freebox Server before 4.2.3.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.0119 Published 2020-09-16 No fix listed CWE-20

TI-2020-14920 CVE-2020-24376 · GHSA-hm8v-p29w-fjv8

MEDIUM 43

A DNS rebinding vulnerability in the UPnP IGD implementations in Freebox v5 before 1.5.29 and Freebox Server before 4.2.3.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00997 Published 2020-09-16 No fix listed CWE-20

TI-2020-14917 CVE-2020-24373 · GHSA-qcxc-9v45-h4hx

LOW 39

A CSRF vulnerability in the UPnP MediaServer implementation in Freebox Server before 4.2.3.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00535 Published 2020-09-16 No fix listed CWE-352