What’s Vulnerable › Vulnerabilities

CVE-2020-24374

• Severity: critical (CVSS 9.6 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.2% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2020-09-16 · updated 2026-06-17
• Weakness: CWE-20

Description

A DNS rebinding vulnerability in Freebox v5 before 1.5.29.

Affected products

• Freebox Hd Firmware: before 1.5.29 — fixed in 1.5.29

How to fix

Upgrade to a fixed version: Freebox Hd Firmware 1.5.29. Check the vendor advisory for mitigations.

References

• https://dev.freebox.fr/blog/?p=10222
• https://www.gabriel.urdhr.fr/2020/09/23/dns-rebinding-freebox/
• https://dev.freebox.fr/blog/?p=10222
• https://www.gabriel.urdhr.fr/2020/09/23/dns-rebinding-freebox/

Get alerted when CVE-2020-24374 or the next vulnerability affects your stack