Vulnerabilities > Free > Medium

DATE CVE VULNERABILITY TITLE RISK
2020-10-19 CVE-2020-24375 Authentication Bypass by Spoofing vulnerability in Free Freebox Server and Freebox V5 Firmware
A DNS rebinding vulnerability in the UPnP MediaServer implementation in Freebox Server before 4.2.3.
network
free CWE-290
4.3
2020-09-16 CVE-2020-24376 Improper Input Validation vulnerability in Free products
A DNS rebinding vulnerability in the UPnP IGD implementations in Freebox v5 before 1.5.29 and Freebox Server before 4.2.3.
network
free CWE-20
6.8
2020-01-13 CVE-2014-9382 Cross-Site Request Forgery (CSRF) vulnerability in Free Freebox OS 3.0.2
Freebox OS Web interface 3.0.2 has CSRF which can allow VPN user account creation
network
free CWE-352
4.3