freenas records

3 published records for vendor freenas.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

3 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
41Plan	CVE-2014-5334No exploit	FreeNAS before 9.3-M3 has a blank admin password, which allows remote attackers to gain root privileges by leveraging a WebGui login.freenas · freenas · CWE-254 Pre-auth	Critical9.8	—	5.1%	Jan 8, 2018
17Monitor	CVE-2009-2738No exploit	Cross-site request forgery (CSRF) vulnerability in the WebGUI in FreeNAS before 0.7RC1 allows remote attackers to hijack the authentication freenas · freenas · CWE-79 Pre-auth XSS CSRF	Medium4.3	—	1.1%	Aug 11, 2009
17Monitor	CVE-2009-2739No exploit	Cross-site scripting (XSS) vulnerability in FreeNAS before 0.69.2 allows remote attackers to inject arbitrary web script or HTML via unknownfreenas · freenas · CWE-79 Pre-auth XSS	Medium4.3	—	1.0%	Aug 11, 2009

CVE-2014-5334
41Plan
FreeNAS before 9.3-M3 has a blank admin password, which allows remote attackers to gain root privileges by leveraging a WebGui login.
CriticalCVSS 9.8No exploitEPSS 5%
- Pre-auth
freenas · freenasJan 8, 2018
CVE-2009-2738
17Monitor
Cross-site request forgery (CSRF) vulnerability in the WebGUI in FreeNAS before 0.7RC1 allows remote attackers to hijack the authentication
MediumCVSS 4.3No exploitEPSS 1%
freenas · freenasAug 11, 2009
CVE-2009-2739
17Monitor
Cross-site scripting (XSS) vulnerability in FreeNAS before 0.69.2 allows remote attackers to inject arbitrary web script or HTML via unknown
MediumCVSS 4.3No exploitEPSS 1%
- Pre-auth
- XSS
freenas · freenasAug 11, 2009