Ixsystems Truenas Core vulnerabilities
2 known vulnerabilities affecting ixsystems/truenas_core.
Total CVEs
2
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH1MEDIUM1
Vulnerabilities
Page 1 of 1
CVE-2024-11944P2HIGHCVSS 8.8v13.3-RELEASE2024-12-30
CVE-2024-11944 [HIGH] CWE-22 CVE-2024-11944: iXsystems TrueNAS CORE tarfile.extractall Directory Traversal Remote Code Execution Vulnerability. T
iXsystems TrueNAS CORE tarfile.extractall Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of iXsystems TrueNAS devices. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the tarfile.extractall me
nvd
CVE-2024-11946P3MEDIUMCVSS 6.5v13.3-RELEASE2024-12-30
CVE-2024-11946 [MEDIUM] CWE-319 CVE-2024-11946: iXsystems TrueNAS CORE fetch_plugin_packagesites tar Cleartext Transmission of Sensitive Information
iXsystems TrueNAS CORE fetch_plugin_packagesites tar Cleartext Transmission of Sensitive Information Vulnerability. This vulnerability allows network-adjacent attackers to tamper with firmware update files on affected installations of iXsystems TrueNAS devices. Authentication is not required to exploit this vulnerability.
The specific flaw exists w
nvd