CVE-2024-57273

概要

参考情報

• blog.brillantit.com/exploiting-pfsense-xss-command-injection-cloud-hijack · Exploit
• docs.netgate.com/downloads/pfSense-SA-25_03.webgui.asc · Third Party Advisory
• netgate.com/blog/important-security-updates-for-pfsense-plus-24.11-and-ce-2.7.2 · Release Notes

pfsense ce のその他の脆弱性

• CVE-2024-54780高 8.8Netgate pfSense CE (prior to 2.8.0 beta release) and corresponding Plus builds are vulnerable to command injection in the OpenVPN widget due…
• CVE-2024-54779中 5.4Netgate pfSense CE (prior to 2.8.0 beta release) and corresponding Plus builds is vulnerable to Cross Site Scripting (XSS) in widgets/log.wi…
• CVE-2023-48795中 5.9The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypas…