CVE-2014-5334 FreeNAS before 9.3-M3 has a blank admin password, which allows remote attackers to gain root privileges by leveraging a WebGui login.
CriticalCVSS 9.8
EPSS 5.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
FreeNAS before 9.3-M3 has a blank admin password, which allows remote attackers to gain root privileges by leveraging a WebGui login.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| freenas | <= 9.2.1.7 | No fix listed |
| freenas | = 9.3-m1 | No fix listed |
| freenas | = 9.3-m2 | No fix listed |
| freenas | = 9.3-m3 | No fix listed |
References
- [oss-security] 20140819 Re: FreeNAS default blank password mailing-list third-party-advisory
- 69249 third-party-advisory vdb-entry
- bugs.freenas.org issue-tracking third-party-advisory