Vendors / Freenas Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 0
Exploited now Freenas records in CISA KEV No Freenas vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 50
FreeNAS before 9.3-M3 has a blank admin password, which allows remote attackers to gain root privileges by leveraging a WebGui login.
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.05098 · Published 2018-01-08 · No fix listed CWE-254
Priority LOW 22
Cross-site scripting (XSS) vulnerability in FreeNAS before 0.69.2 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
CVSS 2.0 MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01033 · Published 2009-08-11 · No fix listed CWE-79
Priority LOW 22
Cross-site request forgery (CSRF) vulnerability in the WebGUI in FreeNAS before 0.7RC1 allows remote attackers to hijack the authentication of users for unspecified requests via unknown vectors.
CVSS 2.0 MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.0109 · Published 2009-08-11 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
1 0 2 0 0
THREATIST.IORead the docs