CyberSec.Space Logo
Back to CVE Browser

CVE-2020-11650

HIGH
7.5
CVSS Severity Score
EPSS Score0.1790%
EPSS Percentile0.27th
PublishedApr 8, 2020
Last ModifiedNov 21, 2024

Vulnerability Description

An issue was discovered in iXsystems FreeNAS (and TrueNAS) 11.2 before 11.2-u8 and 11.3 before 11.3-U1. It allows a denial of service. The login authentication component has no limits on the length of an authentication message or the rate at which such messages are sent.

Affected Platforms (CPE)

💻
Ixsystems

Freenas Firmware

= 11.2
💻
Ixsystems

Freenas Firmware

= 11.2
💻
Ixsystems

Freenas Firmware

= 11.2
💻
Ixsystems

Freenas Firmware

= 11.2
💻
Ixsystems

Freenas Firmware

= 11.2
💻
Ixsystems

Freenas Firmware

= 11.2
💻
Ixsystems

Freenas Firmware

= 11.2
💻
Ixsystems

Freenas Firmware

= 11.2
💻
Ixsystems

Freenas Firmware

= 11.2
💻
Ixsystems

Freenas Firmware

= 11.2
💻
Ixsystems

Freenas Firmware

= 11.2
💻
Ixsystems

Freenas Firmware

= 11.2
💻
Ixsystems

Freenas Firmware

= 11.3
💻
Ixsystems

Freenas Firmware

= 11.3
💻
Ixsystems

Freenas Firmware

= 11.3
💻
Ixsystems

Freenas Firmware

= 11.3
💻
Ixsystems

Freenas Firmware

= 11.3
💻
Ixsystems

Freenas Firmware

= 11.3
💻
Ixsystems

Truenas Firmware

= 11.2
💻
Ixsystems

Truenas Firmware

= 11.2
💻
Ixsystems

Truenas Firmware

= 11.2
💻
Ixsystems

Truenas Firmware

= 11.2
💻
Ixsystems

Truenas Firmware

= 11.2
💻
Ixsystems

Truenas Firmware

= 11.2
💻
Ixsystems

Truenas Firmware

= 11.2
💻
Ixsystems

Truenas Firmware

= 11.2
💻
Ixsystems

Truenas Firmware

= 11.2
💻
Ixsystems

Truenas Firmware

= 11.2
💻
Ixsystems

Truenas Firmware

= 11.2
💻
Ixsystems

Truenas Firmware

= 11.2
💻
Ixsystems

Truenas Firmware

= 11.3
💻
Ixsystems

Truenas Firmware

= 11.3
💻
Ixsystems

Truenas Firmware

= 11.3
💻
Ixsystems

Truenas Firmware

= 11.3
💻
Ixsystems

Truenas Firmware

= 11.3
💻
Ixsystems

Truenas Firmware

= 11.3

References & Advisories

🔗 https://jira.ixsystems.com/browse/NAS-104748
🔗 https://security.ixsystems.com/cves/2020-04-08-cve-2020-11650/
🔗 https://jira.ixsystems.com/browse/NAS-104748
🔗 https://security.ixsystems.com/cves/2020-04-08-cve-2020-11650/

Related Vulnerabilities

CVE-2020-195310.0

Apache Commons Configuration uses a third-party library to parse YAML files which by default allows the instantiation of classes i...

CVE-2020-896710.0

There is an improper Neutralization of Special Elements used in an SQL Command (SQL Injection) vulnerability in php files of GESIO...

CVE-2020-079610.0

A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles cer...

CVE-2020-1189610.0

The Treck TCP/IP stack before 6.0.1.66 allows Remote Code Execution, related to IPv4 tunneling.