CVE-2020-11650

HIGH

Published Apr 8, 20206y ago · Modified Jun 17, 20261w ago

7.5 CVSS 3.1

High

Published Apr 8, 2020 6y ago

Last Modified Jun 17, 2026 1w ago

Description

An issue was discovered in iXsystems FreeNAS (and TrueNAS) 11.2 before 11.2-u8 and 11.3 before 11.3-U1. It allows a denial of service. The login authentication component has no limits on the length of an authentication message or the rate at which such messages are sent.

CVSS Details

Base Score

7.5

Exploitability

3.9

Impact

3.6

Vector string

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector Network

Attack Complexity Low

Privileges Required None

User Interaction None

Scope Unchanged

Confidentiality None

Integrity None

Availability High

Threat Intelligence

No active exploitation signals — not in CISA KEV and no EPSS score yet.

Exploit & Patch Status

No Known Exploit

Patch Available

Weaknesses 1

CWE-307

Affected Products 38

Vendor	Product	Version	Range
ixsystems	freenas_firmware	11.2	any
ixsystems	freenas_firmware	11.2	any
ixsystems	freenas_firmware	11.2	any
ixsystems	freenas_firmware	11.2	any
ixsystems	freenas_firmware	11.2	any
ixsystems	freenas_firmware	11.2	any
ixsystems	freenas_firmware	11.2	any
ixsystems	freenas_firmware	11.2	any
ixsystems	freenas_firmware	11.2	any
ixsystems	freenas_firmware	11.2	any
ixsystems	freenas_firmware	11.2	any
ixsystems	freenas_firmware	11.2	any
ixsystems	freenas_firmware	11.3	any
ixsystems	freenas_firmware	11.3	any
ixsystems	freenas_firmware	11.3	any
ixsystems	freenas_firmware	11.3	any
ixsystems	freenas_firmware	11.3	any
ixsystems	freenas_firmware	11.3	any
ixsystems	freenas	*	any
ixsystems	truenas_firmware	11.2	any
ixsystems	truenas_firmware	11.2	any
ixsystems	truenas_firmware	11.2	any
ixsystems	truenas_firmware	11.2	any
ixsystems	truenas_firmware	11.2	any
ixsystems	truenas_firmware	11.2	any
ixsystems	truenas_firmware	11.2	any
ixsystems	truenas_firmware	11.2	any
ixsystems	truenas_firmware	11.2	any
ixsystems	truenas_firmware	11.2	any
ixsystems	truenas_firmware	11.2	any
ixsystems	truenas_firmware	11.2	any
ixsystems	truenas_firmware	11.3	any
ixsystems	truenas_firmware	11.3	any
ixsystems	truenas_firmware	11.3	any
ixsystems	truenas_firmware	11.3	any
ixsystems	truenas_firmware	11.3	any
ixsystems	truenas_firmware	11.3	any
ixsystems	truenas	*	any

References 2

jira.ixsystems.com https://jira.ixsystems.com/browse/NAS-104748

PatchThird Party Advisory
security.ixsystems.com https://security.ixsystems.com/cves/2020-04-08-cve-2020-11650/

Vendor Advisory

Remediation

jira.ixsystems.com https://jira.ixsystems.com/browse/NAS-104748

PatchThird Party Advisory