CVE-2020-24375 - A DNS rebinding vulnerability in the UPnP MediaServer implementation in Freebox Server before 4.2.3

MEDIUM

A DNS rebinding vulnerability in the UPnP MediaServer implementation in Freebox Server before 4.2.3

Published Oct 19, 2020

6.5

MEDIUM

CVSS 3.1

EPSS 1.08%

A DNS rebinding vulnerability in the UPnP MediaServer implementation in Freebox Server before 4.2.3.

No remediation recorded yet.

Weaknesses (1)

CWE-290

Authentication Bypass by Spoofing

Link	Providers	Tags
https://dev.freebox.fr/blog/?p=10222		x_refsource_CONFIRMRelease NotesVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-17107		Advisory
https://www.gabriel.urdhr.fr/2020/09/23/dns-rebinding-freebox/		x_refsource_MISCExploitThird Party Advisory

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Oct 19, 2020

Updated Aug 4, 2024

Reserved Aug 17, 2020

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Oct 19, 2020

Updated Aug 4, 2024

GitHub

No data