critical9.6
CVE-2020-24376
A DNS rebinding vulnerability in the UPnP IGD implementations in Freebox v5 before 1.5.29 and Freebox Server before 4.2.3.
Impact
A DNS rebinding vulnerability in the UPnP IGD implementations in Freebox v5 before 1.5.29 and Freebox Server before 4.2.3.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Free | Freebox Revolution Firmware | before 4.2.3 |
| Free | Freebox Mini Firmware | before 4.2.3 |
| Free | Freebox One Firmware | before 4.2.3 |
| Free | Freebox Delta Firmware | before 4.2.3 |
| Free | Freebox Pop Firmware | before 4.2.3 |