Vulnerability Details CVE-2020-11650
An issue was discovered in iXsystems FreeNAS (and TrueNAS) 11.2 before 11.2-u8 and 11.3 before 11.3-U1. It allows a denial of service. The login authentication component has no limits on the length of an authentication message or the rate at which such messages are sent.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.119
EPSS Ranking 93.5%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 5.0
References
Products affected by CVE-2020-11650
-
cpe:2.3:h:ixsystems:freenas:-
-
cpe:2.3:h:ixsystems:truenas:-
-
cpe:2.3:o:ixsystems:freenas_firmware:11.2
-
cpe:2.3:o:ixsystems:freenas_firmware:11.3
-
cpe:2.3:o:ixsystems:truenas_firmware:11.2
-
cpe:2.3:o:ixsystems:truenas_firmware:11.3