CVE-2024-54780

Netgate pfSense CE (prior to version 2.8.0 beta) and corresponding Plus builds are vulnerable to command injection within the OpenVPN widget . The root cause is the improper sanitization of user-supplied input sent to the OpenVPN management interface. An authenticated attacker can exploit this by...

PT-2025-21162 · Unknown +1 · Pfsense Ce +1

Name of the Vulnerable Software and Affected Versions: pfSense CE versions prior to 2.8.0 beta release corresponding Plus builds versions prior to 2.8.0 beta release Description: The issue is related to command injection in the OpenVPN widget due to improper sanitization of user-supplied input to...