Free Freebox Mini Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Free Freebox Mini Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2020-24376 — CVSS 9.6 (critical): A DNS rebinding vulnerability in the UPnP IGD implementations in Freebox v5 before 1.5.29 and Freebox Server before 4.2.3.
• CVE-2020-24377 — CVSS 9.6 (critical): A DNS rebinding vulnerability in the Freebox OS web interface in Freebox Server before 4.2.3.
• CVE-2020-24373 — CVSS 8.8 (high): A CSRF vulnerability in the UPnP MediaServer implementation in Freebox Server before 4.2.3.