VYPR
← All advisories
High severity7.5NVD Advisory· Published Apr 8, 2020· Updated Jun 17, 2026

CVE-2020-11650

CVE-2020-11650

Description

An issue was discovered in iXsystems FreeNAS (and TrueNAS) 11.2 before 11.2-u8 and 11.3 before 11.3-U1. It allows a denial of service. The login authentication component has no limits on the length of an authentication message or the rate at which such messages are sent.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

39
  • iXsystems/FreeNASdescription
  • iXsystems/TrueNAS COREllm-fuzzy
    Range: < 11.3-U1
  • iXsystems/FreeNASllm-create
    Range: < 11.2-u8
  • iXsystems/Freenas Firmware18 versions
    cpe:2.3:o:ixsystems:freenas_firmware:11.2:-:*:*:*:*:*:*+ 17 more
    • cpe:2.3:o:ixsystems:freenas_firmware:11.2:-:*:*:*:*:*:*
    • cpe:2.3:o:ixsystems:freenas_firmware:11.2:u1:*:*:*:*:*:*
    • cpe:2.3:o:ixsystems:freenas_firmware:11.2:u2:*:*:*:*:*:*
    • cpe:2.3:o:ixsystems:freenas_firmware:11.2:u2.1:*:*:*:*:*:*
    • cpe:2.3:o:ixsystems:freenas_firmware:11.2:u3:*:*:*:*:*:*
    • cpe:2.3:o:ixsystems:freenas_firmware:11.2:u4:*:*:*:*:*:*
    • cpe:2.3:o:ixsystems:freenas_firmware:11.2:u4.1:*:*:*:*:*:*
    • cpe:2.3:o:ixsystems:freenas_firmware:11.2:u5:*:*:*:*:*:*
    • cpe:2.3:o:ixsystems:freenas_firmware:11.2:u5.1:*:*:*:*:*:*
    • cpe:2.3:o:ixsystems:freenas_firmware:11.2:u6:*:*:*:*:*:*
    • cpe:2.3:o:ixsystems:freenas_firmware:11.2:u6.1:*:*:*:*:*:*
    • cpe:2.3:o:ixsystems:freenas_firmware:11.2:u7:*:*:*:*:*:*
    • cpe:2.3:o:ixsystems:freenas_firmware:11.3:-:*:*:*:*:*:*
    • cpe:2.3:o:ixsystems:freenas_firmware:11.3:alpha1:*:*:*:*:*:*
    • cpe:2.3:o:ixsystems:freenas_firmware:11.3:alpha2:*:*:*:*:*:*
    • cpe:2.3:o:ixsystems:freenas_firmware:11.3:beta1:*:*:*:*:*:*
    • cpe:2.3:o:ixsystems:freenas_firmware:11.3:rc1:*:*:*:*:*:*
    • cpe:2.3:o:ixsystems:freenas_firmware:11.3:rc2:*:*:*:*:*:*
  • iXsystems/Truenas Firmware18 versions
    cpe:2.3:o:ixsystems:truenas_firmware:11.2:-:*:*:*:*:*:*+ 17 more
    • cpe:2.3:o:ixsystems:truenas_firmware:11.2:-:*:*:*:*:*:*
    • cpe:2.3:o:ixsystems:truenas_firmware:11.2:u1:*:*:*:*:*:*
    • cpe:2.3:o:ixsystems:truenas_firmware:11.2:u2:*:*:*:*:*:*
    • cpe:2.3:o:ixsystems:truenas_firmware:11.2:u2.1:*:*:*:*:*:*
    • cpe:2.3:o:ixsystems:truenas_firmware:11.2:u3:*:*:*:*:*:*
    • cpe:2.3:o:ixsystems:truenas_firmware:11.2:u4:*:*:*:*:*:*
    • cpe:2.3:o:ixsystems:truenas_firmware:11.2:u4.1:*:*:*:*:*:*
    • cpe:2.3:o:ixsystems:truenas_firmware:11.2:u5:*:*:*:*:*:*
    • cpe:2.3:o:ixsystems:truenas_firmware:11.2:u5.1:*:*:*:*:*:*
    • cpe:2.3:o:ixsystems:truenas_firmware:11.2:u6:*:*:*:*:*:*
    • cpe:2.3:o:ixsystems:truenas_firmware:11.2:u6.1:*:*:*:*:*:*
    • cpe:2.3:o:ixsystems:truenas_firmware:11.2:u7:*:*:*:*:*:*
    • cpe:2.3:o:ixsystems:truenas_firmware:11.3:-:*:*:*:*:*:*
    • cpe:2.3:o:ixsystems:truenas_firmware:11.3:alpha1:*:*:*:*:*:*
    • cpe:2.3:o:ixsystems:truenas_firmware:11.3:alpha2:*:*:*:*:*:*
    • cpe:2.3:o:ixsystems:truenas_firmware:11.3:beta1:*:*:*:*:*:*
    • cpe:2.3:o:ixsystems:truenas_firmware:11.3:rc1:*:*:*:*:*:*
    • cpe:2.3:o:ixsystems:truenas_firmware:11.3:rc2:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.