EUVD-2010-5304

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

FreeNAS 0.7.2 prior to 5543 has unauthenticated cmd-exec backdoor in web interface via cmd to shell.

Reporter	Title	Published	Views	Family All 10
ATTACKERKB	CVE-2010-20059	20 Aug 202515:35	–	attackerkb
Circl	CVE-2010-20059	29 May 201815:50	–	circl
CNNVD	iXsystems FreeNAS 安全漏洞	20 Aug 202500:00	–	cnnvd
CVE	CVE-2010-20059	20 Aug 202515:35	–	cve
Cvelist	CVE-2010-20059 FreeNAS < 0.7.2 rev 5543 exec_raw.php Arbitrary Command Execution	20 Aug 202515:35	–	cvelist
NVD	CVE-2010-20059	20 Aug 202516:15	–	nvd
OpenVAS	FreeNAS Remote Shell Command Execution Vulnerability	19 Nov 201000:00	–	openvas
Positive Technologies	PT-2025-34099 · Undefined · Undefined	20 Aug 202500:00	–	ptsecurity
RedhatCVE	CVE-2010-20059	22 Aug 202516:35	–	redhatcve
Vulnrichment	CVE-2010-20059 FreeNAS < 0.7.2 rev 5543 exec_raw.php Arbitrary Command Execution	20 Aug 202515:35	–	vulnrichment

[
  {
    "enisaIdVendor": [
      {
        "id": "1735b489-43f7-3c09-824d-21ebdcdf530c",
        "vendor": {
          "name": "iXsystems"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "d500f7ee-9098-3cc6-9bba-553bc0604634",
        "product": {
          "name": "FreeNAS"
        },
        "product_version": "* <0.7.2 rev 5543"
      }
    ]
  }
]

Source	Link
exploit-db	www.exploit-db.com/exploits/16313
raw	www.raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/multi/http/freenas_exec_raw.rb
sourceforge	www.sourceforge.net/projects/freenas/
github	www.github.com/freenas
truenas	www.truenas.com/freenas/
tenable	www.tenable.com/plugins/nnm/5714
web	www.web.archive.org/web/20101218143110/http://sourceforge.net/projects/freenas/files//stable/0.7.2/NOTES%200.7.2.5543.txt/view
vulncheck	www.vulncheck.com/advisories/freenas-arbitrary-command-execution
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

6.4Medium risk

Vulners AI Score6.4

CVSS 49.3

EPSS0.48631

SSVC