CVE-2020-11650: Ixsystems Freenas Firmware

High severity, CVSS 7.5. EPSS: 3% chance of exploitation in the next 30 days.

An issue was discovered in iXsystems FreeNAS (and TrueNAS) 11.2 before 11.2-u8 and 11.3 before 11.3-U1. It allows a denial of service. The login authentication component has no limits on the length of an authentication message or the rate at which such messages are sent.

Affected products

• Ixsystems Freenas Firmware: version 11.2 only; version 11.3 only
• Ixsystems Truenas Firmware: version 11.2 only; version 11.3 only

Published 2020-04-08. Last modified 2026-06-17.