Skip to content
OpenAdvisories

Vendor

iXsystems

4 known vulnerabilities.

Products

TrueNAS CORE 2 TrueNAS SCALE 1 FreeNAS 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.3
    CVE-2010-20059 Public exploit

    FreeNAS < 0.7.2 rev 5543 exec_raw.php Arbitrary Command Execution

    FreeNAS 0.7.2 prior to revision 5543 includes an unauthenticated command‐execution backdoor in its web interface. The exec_raw.php script exposes a cmd parameter that is passed directly to the underlying shell without sanitation.

    iXsystems FreeNAS