7.5

CVE-2020-11650

An issue was discovered in iXsystems FreeNAS (and TrueNAS) 11.2 before 11.2-u8 and 11.3 before 11.3-U1. It allows a denial of service. The login authentication component has no limits on the length of an authentication message or the rate at which such messages are sent.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ixsystems ≫ Freenas Firmware Version11.2 Update-
   Ixsystems ≫ Freenas Version-
Ixsystems ≫ Freenas Firmware Version11.2 Updateu1
   Ixsystems ≫ Freenas Version-
Ixsystems ≫ Freenas Firmware Version11.2 Updateu2
   Ixsystems ≫ Freenas Version-
Ixsystems ≫ Freenas Firmware Version11.2 Updateu2.1
   Ixsystems ≫ Freenas Version-
Ixsystems ≫ Freenas Firmware Version11.2 Updateu3
   Ixsystems ≫ Freenas Version-
Ixsystems ≫ Freenas Firmware Version11.2 Updateu4
   Ixsystems ≫ Freenas Version-
Ixsystems ≫ Freenas Firmware Version11.2 Updateu4.1
   Ixsystems ≫ Freenas Version-
Ixsystems ≫ Freenas Firmware Version11.2 Updateu5
   Ixsystems ≫ Freenas Version-
Ixsystems ≫ Freenas Firmware Version11.2 Updateu5.1
   Ixsystems ≫ Freenas Version-
Ixsystems ≫ Freenas Firmware Version11.2 Updateu6
   Ixsystems ≫ Freenas Version-
Ixsystems ≫ Freenas Firmware Version11.2 Updateu6.1
   Ixsystems ≫ Freenas Version-
Ixsystems ≫ Freenas Firmware Version11.2 Updateu7
   Ixsystems ≫ Freenas Version-
Ixsystems ≫ Freenas Firmware Version11.3 Update-
   Ixsystems ≫ Freenas Version-
Ixsystems ≫ Freenas Firmware Version11.3 Updatealpha1
   Ixsystems ≫ Freenas Version-
Ixsystems ≫ Freenas Firmware Version11.3 Updatealpha2
   Ixsystems ≫ Freenas Version-
Ixsystems ≫ Freenas Firmware Version11.3 Updatebeta1
   Ixsystems ≫ Freenas Version-
Ixsystems ≫ Freenas Firmware Version11.3 Updaterc1
   Ixsystems ≫ Freenas Version-
Ixsystems ≫ Freenas Firmware Version11.3 Updaterc2
   Ixsystems ≫ Freenas Version-
Ixsystems ≫ Truenas Firmware Version11.2 Update-
   Ixsystems ≫ Truenas Version-
Ixsystems ≫ Truenas Firmware Version11.2 Updateu1
   Ixsystems ≫ Truenas Version-
Ixsystems ≫ Truenas Firmware Version11.2 Updateu2
   Ixsystems ≫ Truenas Version-
Ixsystems ≫ Truenas Firmware Version11.2 Updateu2.1
   Ixsystems ≫ Truenas Version-
Ixsystems ≫ Truenas Firmware Version11.2 Updateu3
   Ixsystems ≫ Truenas Version-
Ixsystems ≫ Truenas Firmware Version11.2 Updateu4
   Ixsystems ≫ Truenas Version-
Ixsystems ≫ Truenas Firmware Version11.2 Updateu4.1
   Ixsystems ≫ Truenas Version-
Ixsystems ≫ Truenas Firmware Version11.2 Updateu5
   Ixsystems ≫ Truenas Version-
Ixsystems ≫ Truenas Firmware Version11.2 Updateu5.1
   Ixsystems ≫ Truenas Version-
Ixsystems ≫ Truenas Firmware Version11.2 Updateu6
   Ixsystems ≫ Truenas Version-
Ixsystems ≫ Truenas Firmware Version11.2 Updateu6.1
   Ixsystems ≫ Truenas Version-
Ixsystems ≫ Truenas Firmware Version11.2 Updateu7
   Ixsystems ≫ Truenas Version-
Ixsystems ≫ Truenas Firmware Version11.3 Update-
   Ixsystems ≫ Truenas Version-
Ixsystems ≫ Truenas Firmware Version11.3 Updatealpha1
   Ixsystems ≫ Truenas Version-
Ixsystems ≫ Truenas Firmware Version11.3 Updatealpha2
   Ixsystems ≫ Truenas Version-
Ixsystems ≫ Truenas Firmware Version11.3 Updatebeta1
   Ixsystems ≫ Truenas Version-
Ixsystems ≫ Truenas Firmware Version11.3 Updaterc1
   Ixsystems ≫ Truenas Version-
Ixsystems ≫ Truenas Firmware Version11.3 Updaterc2
   Ixsystems ≫ Truenas Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 11.92% 0.935
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
CWE-307 Improper Restriction of Excessive Authentication Attempts

The product does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame.