| Package | Affected versions | Patched versions |
|---|---|---|
| pfsense | = 2.7.2 |
Netgate pfSense CE 2.7.2 allows code execution by using the module installer with a backup file with a serialized PHP object containing the post_reboot_commands property. NOTE: the Supplier disputes this because this installer is only available to admins and they are intentionally allowed to execute PHP code.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free