CVE-2010-20059 FreeNAS < 0.7.2 rev 5543 exec_raw.php Arbitrary Command Execution

🗓️ 20 Aug 2025 15:35:08Reported by VulnCheckType

FreeNAS before rev 5543 has unauthenticated command execution in exec_raw_php's cmd parameter.

Reporter	Title	Published	Views	Family All 10
ATTACKERKB	CVE-2010-20059	20 Aug 202515:35	–	attackerkb
Circl	CVE-2010-20059	29 May 201815:50	–	circl
CNNVD	iXsystems FreeNAS 安全漏洞	20 Aug 202500:00	–	cnnvd
CVE	CVE-2010-20059	20 Aug 202515:35	–	cve
EUVD	EUVD-2010-5304	7 Oct 202500:30	–	euvd
NVD	CVE-2010-20059	20 Aug 202516:15	–	nvd
OpenVAS	FreeNAS Remote Shell Command Execution Vulnerability	19 Nov 201000:00	–	openvas
Positive Technologies	PT-2025-34099 · Undefined · Undefined	20 Aug 202500:00	–	ptsecurity
RedhatCVE	CVE-2010-20059	22 Aug 202516:35	–	redhatcve
Vulnrichment	CVE-2010-20059 FreeNAS < 0.7.2 rev 5543 exec_raw.php Arbitrary Command Execution	20 Aug 202515:35	–	vulnrichment

[
  {
    "defaultStatus": "unaffected",
    "modules": [
      "exec_raw.php"
    ],
    "product": "FreeNAS",
    "repo": "https://github.com/freenas",
    "vendor": "iXsystems",
    "versions": [
      {
        "lessThan": "0.7.2 rev 5543",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
truenas	www.truenas.com/freenas/
vulncheck	www.vulncheck.com/advisories/freenas-arbitrary-command-execution
raw	www.raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/multi/http/freenas_exec_raw.rb
exploit-db	www.exploit-db.com/exploits/16313
github	www.github.com/freenas
web	www.web.archive.org/web/20101218143110/http://sourceforge.net/projects/freenas/files//stable/0.7.2/NOTES%200.7.2.5543.txt/view
tenable	www.tenable.com/plugins/nnm/5714
sourceforge	www.sourceforge.net/projects/freenas/

15 May 2026 11:13Current

CVSS 49.3

EPSS0.48631

CWE-78