Lucene search

RedhatCVE-2014-5334

HistoryJan 08, 2018 - 7:29 p.m.

CVE-2014-5334

2018-01-0819:29:00

CWE-254

redhat

web.nvd.nist.gov

freenas

cve-2014-5334

nvd

security

admin password

remote attack

root privileges

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.5

Confidence

High

EPSS

0.006

Percentile

78.5%

JSON

FreeNAS before 9.3-M3 has a blank admin password, which allows remote attackers to gain root privileges by leveraging a WebGui login.

Affected configurations

Nvd

Node

freenasfreenasRange≤9.2.1.7

freenasfreenasMatch9.3m1

freenasfreenasMatch9.3m2

freenasfreenasMatch9.3m3

VendorProductVersionCPE
freenasfreenas*cpe:2.3:a:freenas:freenas:*:*:*:*:*:*:*:*
freenasfreenas9.3cpe:2.3:a:freenas:freenas:9.3:m1:*:*:*:*:*:*
freenasfreenas9.3cpe:2.3:a:freenas:freenas:9.3:m2:*:*:*:*:*:*
freenasfreenas9.3cpe:2.3:a:freenas:freenas:9.3:m3:*:*:*:*:*:*

Vendor	Product	Version	CPE
freenas	freenas	*	cpe:2.3:a:freenas:freenas::::::::
freenas	freenas	9.3	cpe:2.3:a:freenas:freenas:9.3:m1::::::
freenas	freenas	9.3	cpe:2.3:a:freenas:freenas:9.3:m2::::::
freenas	freenas	9.3	cpe:2.3:a:freenas:freenas:9.3:m3::::::

References

www.openwall.com/lists/oss-security/2014/08/19/2

www.securityfocus.com/bid/69249

bugs.freenas.org/issues/5844

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.5

Confidence

High

EPSS

0.006

Percentile

78.5%

JSON

Related for CVE-2014-5334