Netgate Pfsense vulnerabilities
3 vulnerabilities
Known vulnerabilities in Netgate Pfsense, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2018-4019netgatenetgate pfsense+1
EPSS score48.72%
An exploitable command injection vulnerability exists in the way Netgate pfSense CE 2.4.4-RELEASE processes the parameters of a specific POST request. The attacker can exploit this and gain the ability to execute arbitrary commands on the system. An attacker needs to be able to send authenticated POST requests to the administration web interface. Command injection is possible in the `powerd_normal_mode` parameter.CVE-2018-4020netgatenetgate pfsense+1EPSS score48.72%
An exploitable command injection vulnerability exists in the way Netgate pfSense CE 2.4.4-RELEASE processes the parameters of a specific POST request. The attacker can exploit this and gain the ability to execute arbitrary commands on the system. An attacker needs to be able to send authenticated POST requests to the administration web interface. Command injection is possible in the `powerd_ac_mode` POST parameter parameter.CVE-2018-4021netgatenetgate pfsense+1EPSS score72.21%
An exploitable command injection vulnerability exists in the way Netgate pfSense CE 2.4.4-RELEASE processes the parameters of a specific POST request. The attacker can exploit this and gain the ability to execute arbitrary commands on the system. An attacker needs to be able to send authenticated POST requests to the administration web interface. Command injection is possible in the `powerd_battery_mode` POST parameter.