Lucene search

K
prionPRIOn knowledge basePRION:CVE-2022-40624
HistoryDec 20, 2022 - 3:15 p.m.

Design/Logic Flaw

2022-12-2015:15:00
PRIOn knowledge base
www.prio-n.com
6
pfsense
pfblockerng
command execution
http host header
remote attackers
root access
vulnerability

9.7 High

AI Score

Confidence

High

0.971 High

EPSS

Percentile

99.8%

pfSense pfBlockerNG through 2.1.4_27 allows remote attackers to execute arbitrary OS commands as root via the HTTP Host header, a different vulnerability than CVE-2022-31814.

CPENameOperatorVersion
pfblockerngeq< 2.1.4-27

9.7 High

AI Score

Confidence

High

0.971 High

EPSS

Percentile

99.8%