95 matches found
Cross site request forgery (csrf)
A CSRF vulnerability in the UPnP MediaServer implementation in Freebox Server before 4.2.3...
Design/Logic Flaw
A DNS rebinding vulnerability in the Freebox OS web interface in Freebox Server before 4.2.3...
Design/Logic Flaw
A DNS rebinding vulnerability in the UPnP IGD implementations in Freebox v5 before 1.5.29 and Freebox Server before 4.2.3...
CVE-2020-24377
CVE-2020-24377 is a DNS rebinding vulnerability in the Freebox OS web interface of Freebox Server prior to 4.2.3. The issue affects the web UI component used to manage the device and is driven by DNS rebinding. Impact is described as high, with the potential for unauthorized actions via the web i...
CVE-2020-24377
A DNS rebinding vulnerability in the Freebox OS web interface in Freebox Server before 4.2.3...
CVE-2020-24376
CVE-2020-24376 describes a DNS rebinding vulnerability in the UPnP Internet Gateway Device (IGD) implementations of Freebox v5 prior to 1.5.29 and Freebox Server prior to 4.2.3. The connected records confirm the affected products and versions and reiterate the same vulnerability description. No d...
CVE-2020-24376
A DNS rebinding vulnerability in the UPnP IGD implementations in Freebox v5 before 1.5.29 and Freebox Server before 4.2.3...
CVE-2020-24373
A CSRF vulnerability in the UPnP MediaServer implementation in Freebox Server before 4.2.3...
CVE-2020-24373
CVE-2020-24373 affects Freebox Server's UPnP MediaServer (prior to version 4.2.3). The vulnerability is a CSRF issue in the UPnP MediaServer implementation that could be triggered by an attacker. The available connected documents confirm the affected software (Freebox Server) and vulnerable compo...
CVE-2020-24374
A DNS rebinding vulnerability in Freebox v5 before 1.5.29...
CVE-2020-24374
The CVE-2020-24374 entry describes a DNS rebinding vulnerability in Freebox v5 prior to 1.5.29. The available connected sources indicate that the issue affects Freebox software (v5) and that upgrading to version 1.5.29 or later mitigates the vulnerability (per PT-2020-15716). CVSS metrics in the ...
PT-2020-15719 · Freebox · Freebox Server
Name of the Vulnerable Software and Affected Versions: Freebox Server versions prior to 4.2.3 Description: A DNS rebinding issue affects the Freebox OS web interface. This could potentially allow for malicious actions. Recommendations: For versions prior to 4.2.3, update to version 4.2.3 or later...
CVE-2020-24377: Improper Input Validation
A DNS rebinding vulnerability in the Freebox OS web interface in Freebox Server before 4.2.3...
CVE-2020-24374: Improper Input Validation
A DNS rebinding vulnerability in Freebox v5 before 1.5.29...
PT-2020-15718
Name of the Vulnerable Software and Affected Versions Freebox versions prior to 1.5.29 Freebox Server versions prior to 4.2.3 Description A DNS rebinding issue affects the UPnP IGD implementations. Recommendations For Freebox versions prior to 1.5.29, update to version 1.5.29 or later. For Freebo...
CVE-2020-24373: Cross-Site Request Forgery (CSRF)
A CSRF vulnerability in the UPnP MediaServer implementation in Freebox Server before 4.2.3...
PT-2020-15716 · Free · Freebox
Name of the Vulnerable Software and Affected Versions: Freebox version 1.5.28 and earlier Description: A DNS rebinding issue affects the software, potentially allowing unauthorized access. Recommendations: For versions prior to 1.5.29, update to version 1.5.29 or later to resolve the issue...
PT-2020-15715 · Free · Freebox Server
Name of the Vulnerable Software and Affected Versions: Freebox Server versions prior to 4.2.3 Description: A CSRF issue exists in the UPnP MediaServer implementation. Recommendations: For versions prior to 4.2.3, update to version 4.2.3 or later to resolve the issue...
