CVE-2020-24377: Free Freebox Delta Firmware

Critical severity, CVSS 9.6. EPSS: 1.2% chance of exploitation in the next 30 days.

A DNS rebinding vulnerability in the Freebox OS web interface in Freebox Server before 4.2.3.

Affected products

• Free Freebox Delta Firmware: before 4.2.3 (fixed in 4.2.3)
• Free Freebox Mini Firmware: before 4.2.3 (fixed in 4.2.3)
• Free Freebox One Firmware: before 4.2.3 (fixed in 4.2.3)
• Free Freebox Pop Firmware: before 4.2.3 (fixed in 4.2.3)
• Free Freebox Revolution Firmware: before 4.2.3 (fixed in 4.2.3)

Published 2020-09-16. Last modified 2026-06-17.