CVE-2023-27100

概要

参考情報

• packetstormsecurity.com/files/171791/pfsenseCE-2.6.0-Protection-Bypass.html
• docs.netgate.com/downloads/pfSense-SA-23_05.sshguard.asc · Vendor Advisory
• redmine.pfsense.org/issues/13574 · Issue Tracking
• packetstorm.news/files/id/171791

pfsense plus のその他の脆弱性

• CVE-2024-57273中 5.4Netgate pfSense CE (prior to 2.8.0 beta release) and corresponding Plus builds is vulnerable to Cross-site scripting (XSS) in the Automatic …
• CVE-2024-54780高 8.8Netgate pfSense CE (prior to 2.8.0 beta release) and corresponding Plus builds are vulnerable to command injection in the OpenVPN widget due…
• CVE-2024-54779中 5.4Netgate pfSense CE (prior to 2.8.0 beta release) and corresponding Plus builds is vulnerable to Cross Site Scripting (XSS) in widgets/log.wi…
• CVE-2023-48795中 5.9The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypas…
• CVE-2023-48123高 8.8An issue in Netgate pfSense Plus v.23.05.1 and before and pfSense CE v.2.7.0 allows a remote attacker to execute arbitrary code via a crafte…