CyberSec.Space Logo
Back to CVE Browser

CVE-2020-11650

HIGH
7.5
CVSS Severity Score
EPSS Score0.1790%
EPSS Percentile0.27th
PublishedApr 8, 2020
Last ModifiedNov 21, 2024

Vulnerability Description

An issue was discovered in iXsystems FreeNAS (and TrueNAS) 11.2 before 11.2-u8 and 11.3 before 11.3-U1. It allows a denial of service. The login authentication component has no limits on the length of an authentication message or the rate at which such messages are sent.

Affected Platforms (CPE)

💻
Ixsystems

Freenas Firmware

= 11.2
💻
Ixsystems

Freenas Firmware

= 11.2
💻
Ixsystems

Freenas Firmware

= 11.2
💻
Ixsystems

Freenas Firmware

= 11.2
💻
Ixsystems

Freenas Firmware

= 11.2
💻
Ixsystems

Freenas Firmware

= 11.2
💻
Ixsystems

Freenas Firmware

= 11.2
💻
Ixsystems

Freenas Firmware

= 11.2
💻
Ixsystems

Freenas Firmware

= 11.2
💻
Ixsystems

Freenas Firmware

= 11.2
💻
Ixsystems

Freenas Firmware

= 11.2
💻
Ixsystems

Freenas Firmware

= 11.2
💻
Ixsystems

Freenas Firmware

= 11.3
💻
Ixsystems

Freenas Firmware

= 11.3
💻
Ixsystems

Freenas Firmware

= 11.3
💻
Ixsystems

Freenas Firmware

= 11.3
💻
Ixsystems

Freenas Firmware

= 11.3
💻
Ixsystems

Freenas Firmware

= 11.3
💻
Ixsystems

Truenas Firmware

= 11.2
💻
Ixsystems

Truenas Firmware

= 11.2
💻
Ixsystems

Truenas Firmware

= 11.2
💻
Ixsystems

Truenas Firmware

= 11.2
💻
Ixsystems

Truenas Firmware

= 11.2
💻
Ixsystems

Truenas Firmware

= 11.2
💻
Ixsystems

Truenas Firmware

= 11.2
💻
Ixsystems

Truenas Firmware

= 11.2
💻
Ixsystems

Truenas Firmware

= 11.2
💻
Ixsystems

Truenas Firmware

= 11.2
💻
Ixsystems

Truenas Firmware

= 11.2
💻
Ixsystems

Truenas Firmware

= 11.2
💻
Ixsystems

Truenas Firmware

= 11.3
💻
Ixsystems

Truenas Firmware

= 11.3
💻
Ixsystems

Truenas Firmware

= 11.3
💻
Ixsystems

Truenas Firmware

= 11.3
💻
Ixsystems

Truenas Firmware

= 11.3
💻
Ixsystems

Truenas Firmware

= 11.3

References & Advisories

🔗 https://jira.ixsystems.com/browse/NAS-104748
🔗 https://security.ixsystems.com/cves/2020-04-08-cve-2020-11650/
🔗 https://jira.ixsystems.com/browse/NAS-104748
🔗 https://security.ixsystems.com/cves/2020-04-08-cve-2020-11650/

Related Vulnerabilities

CVE-2020-1238910.0

The Firefox content processes did not sufficiently lockdown access control which could result in a sandbox escape. *Note: this iss...

CVE-2020-1184410.0

Incorrect Authorization vulnerability in Micro Focus Container Deployment Foundation component affects products: - Hybrid Cloud Ma...

CVE-2020-1238810.0

The Firefox content processes did not sufficiently lockdown access control which could result in a sandbox escape. *Note: this iss...

CVE-2020-896710.0

There is an improper Neutralization of Special Elements used in an SQL Command (SQL Injection) vulnerability in php files of GESIO...