ISOMAN

CVE

CVE-2023-48123

An issue in Netgate pfSense Plus v.23.05.1 and before and pfSense CE v.2.7.0 allows a remote attacker to execute arbitrary code via a crafted request to the packet_capture.php file.

Severity
HIGH
CVSS
8.8
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
pfSense CE2.6.0 amd64 ce isounknownsource
pfSense CE2.7.0 amd64 ce isounknownsource
pfSense CE2.6.0 amd64 ce memstickunknownsource
pfSense CE2.7.0 amd64 ce memstickunknownsource
pfSense CE2.6.0 amd64 ce memstick-adiunknownsource
pfSense CE2.7.0 amd64 ce memstick-adiunknownsource
pfSense CE2.6.0 amd64 ce memstick-serialunknownsource
pfSense CE2.7.0 amd64 ce memstick-serialunknownsource

References

  1. https://docs.netgate.com/downloads/pfSense-SA-23_11.webgui.asc
  2. https://github.com/pfsense/pfsense/commit/f72618c4abb61ea6346938d0c93df9078736b775
  3. https://redmine.pfsense.org/issues/14809
  4. https://docs.netgate.com/downloads/pfSense-SA-23_11.webgui.asc
  5. https://github.com/pfsense/pfsense/commit/f72618c4abb61ea6346938d0c93df9078736b775
  6. https://redmine.pfsense.org/issues/14809