Free

Records7All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Free records in CISA KEV

No Free vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Freebox Delta Firmware 3 records MEDIUM Freebox Mini Firmware 3 records MEDIUM Freebox One Firmware 3 records MEDIUM Freebox Pop Firmware 3 records MEDIUM Freebox Revolution Firmware 3 records MEDIUM Freebox Os 2 records LOW Freebox Hd Firmware 1 record MEDIUM Freebox Server 1 record LOW

Records

2 records in Freebox Os · all components

TI-2014-07613 CVE-2014-9382 · GHSA-qxcq-8hc9-7fhw

Freebox OS Web interface 3.0.2 has CSRF which can allow VPN user account creation

LOW 30

Freebox OS Web interface 3.0.2 has CSRF which can allow VPN user account creation

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00794 Published 2020-01-13 No fix listed CWE-352

TI-2014-07633 CVE-2014-9405 · GHSA-qrjx-wfph-47qh

A Cross-Site Scripting (XSS) vulnerability exists in the description field of an Download…

LOW 27

A Cross-Site Scripting (XSS) vulnerability exists in the description field of an Download RSS item or Contacts in Freebox OS Web interface 3.0.2, which allows malicious users to execute arbitrary code.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01505 Published 2020-01-06 No fix listed CWE-79

Open these records in search →

Critical	3
High	1
Medium	3
Low	0
No CVSS	0