ZDI-CAN-25636
HIGH 7.5
Overdue
Nov 15, 2024
iXsystems
iXsystems is a storage and network infrastructure company known for FreeNAS and TrueNAS products. The vulnerability has a high severity rating of 7.5 and requires adjacent network access with no authentication or user interaction, but involves complex exploitation conditions; it could result in complete compromise of confidentiality, integrity, and availability. Security teams should monitor for patches when iXsystems releases their fix by the March 15, 2025 deadline and prioritize updates for systems accessible over network segments.
Advisory Details
Researcher
Discovered by:
Sina Kheirkhah (@SinSinology) of Summoning Team (@SummoningTeam)
Reported
November 15, 2024
Deadline
March 15, 2025
397d overdue
CVSS Vector
AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H