CVE-2020-24375

MEDIUM

Freebox Server < 4.2.3 - Authentication Bypass via DNS Rebinding

Title source: llm

A DNS rebinding vulnerability in the UPnP MediaServer implementation in Freebox Server before 4.2.3.

Core 2

Core References

Release Notes, Vendor Advisory x_refsource_confirm

Exploit, Third Party Advisory x_refsource_misc

CVSS v3 6.5

EPSS 0.0106

EPSS Percentile 60.1%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

CWE

CWE-290

Status published

Products (2)

free/freebox_server < 4.2.3

free/freebox_v5_firmware < 1.5.29

Published Oct 19, 2020

Tracked Since Feb 18, 2026