ZDI-CAN-25636 HIGH 7.5 Overdue Nov 15, 2024

iXsystems

iXsystems is a storage and network infrastructure company known for FreeNAS and TrueNAS products. The vulnerability has a high severity rating of 7.5 and requires adjacent network access with no authentication or user interaction, but involves complex exploitation conditions; it could result in complete compromise of confidentiality, integrity, and availability. Security teams should monitor for patches when iXsystems releases their fix by the March 15, 2025 deadline and prioritize updates for systems accessible over network segments.

Advisory Details
Researcher Discovered by: Sina Kheirkhah (@SinSinology) of Summoning Team (@SummoningTeam)
Reported November 15, 2024
Deadline March 15, 2025 397d overdue
CVSS Vector AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy