What’s Vulnerable › Vulnerabilities

CVE-2020-24375

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.1% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2020-10-19 · updated 2026-06-17
• Weakness: CWE-290

Description

A DNS rebinding vulnerability in the UPnP MediaServer implementation in Freebox Server before 4.2.3.

Affected products

• Freebox Server: before 4.2.3 — fixed in 4.2.3
• Freebox V5 Firmware: before 1.5.29 — fixed in 1.5.29

How to fix

Upgrade to a fixed version: Freebox Server 4.2.3; Freebox V5 Firmware 1.5.29. Check the vendor advisory for mitigations.

References

• https://dev.freebox.fr/blog/?p=10222
• https://www.gabriel.urdhr.fr/2020/09/23/dns-rebinding-freebox/
• https://dev.freebox.fr/blog/?p=10222
• https://www.gabriel.urdhr.fr/2020/09/23/dns-rebinding-freebox/

Get alerted when CVE-2020-24375 or the next vulnerability affects your stack