CVE-2020-24375: Free Freebox Server

Medium severity, CVSS 6.5. EPSS: 1.1% chance of exploitation in the next 30 days.

A DNS rebinding vulnerability in the UPnP MediaServer implementation in Freebox Server before 4.2.3.

Affected products

• Free Freebox Server: before 4.2.3 (fixed in 4.2.3)
• Free Freebox v5 Firmware: before 1.5.29 (fixed in 1.5.29)

Published 2020-10-19. Last modified 2026-06-17.