Vulnerabilities

TI-2014-04350 CVE-2014-5334 · GHSA-p7rr-v8fr-7jgw

FreeNAS before 9.3-M3 has a blank admin password, which allows remote attackers to gain…

MEDIUM 50

FreeNAS before 9.3-M3 has a blank admin password, which allows remote attackers to gain root privileges by leveraging a WebGui login.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.05098 Published 2018-01-08 No fix listed CWE-254

TI-2009-02613 CVE-2009-2739 · GHSA-7g5w-rf2f-26r6

Cross-site scripting (XSS) vulnerability in FreeNAS before 0.69.2 allows remote attackers…

LOW 22

Cross-site scripting (XSS) vulnerability in FreeNAS before 0.69.2 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01033 Published 2009-08-11 No fix listed CWE-79

TI-2009-02612 CVE-2009-2738 · GHSA-3cm9-r84w-4v7c

Cross-site request forgery (CSRF) vulnerability in the WebGUI in FreeNAS before 0.7RC1…

LOW 22

Cross-site request forgery (CSRF) vulnerability in the WebGUI in FreeNAS before 0.7RC1 allows remote attackers to hijack the authentication of users for unspecified requests via unknown vectors.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0109 Published 2009-08-11 No fix listed CWE-79

Vulnerabilities

Filters

FreeNAS before 9.3-M3 has a blank admin password, which allows remote attackers to gain…

Cross-site scripting (XSS) vulnerability in FreeNAS before 0.69.2 allows remote attackers…

Cross-site request forgery (CSRF) vulnerability in the WebGUI in FreeNAS before 0.7RC1…