Lucene search

K
cvelistMitreCVELIST:CVE-2023-27253
HistoryMar 17, 2023 - 12:00 a.m.

CVE-2023-27253

2023-03-1700:00:00
mitre
www.cve.org
command injection
netgate pfsense
authenticated attackers
xml file manipulation
cve-2023-27253

0.481 Medium

EPSS

Percentile

97.5%

A command injection vulnerability in the function restore_rrddata() of Netgate pfSense v2.7.0 allows authenticated attackers to execute arbitrary commands via manipulating the contents of an XML file supplied to the component config.xml.

0.481 Medium

EPSS

Percentile

97.5%