FreeNAS before 9.3-M3 has a blank admin password, which allows remote attackers to gain root privileges by leveraging a WebGui login.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Freenas | Freenas | * | 9.2.1.7 (including) |
| Freenas | Freenas | 9.3-m1 (including) | 9.3-m1 (including) |
| Freenas | Freenas | 9.3-m2 (including) | 9.3-m2 (including) |
| Freenas | Freenas | 9.3-m3 (including) | 9.3-m3 (including) |