| Package | Affected versions | Patched versions |
|---|---|---|
| pfsense | = 2.8.0 |
Netgate pfSense CE 2.8.0 allows code execution in the XMLRPC API via pfsense.exec_php. NOTE: the Supplier disputes this because the API call is only available to admins and they are intentionally allowed to execute PHP code.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free