Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2020-24376 Details

A DNS rebinding vulnerability in the UPnP IGD implementations in Freebox v5 before 1.5.29 and Freebox Server before 4.2.3.

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:9.6 CRITICALVector:CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://dev.freebox.fr/blog/?p=10222	CVE	Vendor Advisory
https://www.gabriel.urdhr.fr/2020/09/23/dns-rebinding-freebox/	CVE
https://dev.freebox.fr/blog/?p=10222	[email protected]	Vendor Advisory
https://www.gabriel.urdhr.fr/2020/09/23/dns-rebinding-freebox/	[email protected]

CWE-ID	CWE Name	Source
CWE-20	Improper Input Validation	[email protected]

Product	Versions
free freebox revolution firmware	< 4.2.3
CPE cpe:2.3:o:free:freebox_revolution_firmware:::::::: Remediation No remediation found in references.
free freebox revolution	All versions
CPE cpe:2.3:h:free:freebox_revolution:-:::::::* Remediation No remediation found in references.
free freebox mini firmware	< 4.2.3
CPE cpe:2.3:o:free:freebox_mini_firmware:::::::: Remediation No remediation found in references.
free freebox mini	All versions
CPE cpe:2.3:h:free:freebox_mini:-:::::::* Remediation No remediation found in references.
free freebox one firmware	< 4.2.3
CPE cpe:2.3:o:free:freebox_one_firmware:::::::: Remediation No remediation found in references.
free freebox one	All versions
CPE cpe:2.3:h:free:freebox_one:-:::::::* Remediation No remediation found in references.
free freebox delta firmware	< 4.2.3
CPE cpe:2.3:o:free:freebox_delta_firmware:::::::: Remediation No remediation found in references.
free freebox delta	All versions
CPE cpe:2.3:h:free:freebox_delta:-:::::::* Remediation No remediation found in references.
free freebox pop firmware	< 4.2.3
CPE cpe:2.3:o:free:freebox_pop_firmware:::::::: Remediation No remediation found in references.
free freebox pop	All versions
CPE cpe:2.3:h:free:freebox_pop:-:::::::* Remediation No remediation found in references.

5 change records found show changes

QUICK INFO