CVE-2018-4021

An exploitable command injection vulnerability exists in the way Netgate pfSense CE 2.4.4-RELEASE processes the parameters of a specific POST request. The attacker can exploit this and gain the ability to execute arbitrary commands on the system. An attacker needs to be able to send authenticated...

CVE-2018-4020

PfSense CE 2.4.4-RELEASE is affected by three command-injection vulnerabilities in POST handlers of system_advanced_misc.php, via powerd_normal_mode, powerd_ac_mode, and powerd_battery_mode parameters. The root cause is improper sanitization of these POST values, allowing an authenticated attacke...

CVE-2018-4019

Netgate pfSense CE 2.4.4-RELEASE is affected by three remote command-injection vulnerabilities in the POST handling of system_advanced_misc.php (powerd_normal_mode, powerd_ac_mode, powerd_battery_mode). An attacker must authenticate to the pfSense web admin interface to exploit these via crafted ...

CVE-2018-4019: Improper Neutralization of Special Elements used in an OS Command

An exploitable command injection vulnerability exists in the way Netgate pfSense CE 2.4.4-RELEASE processes the parameters of a specific POST request. The attacker can exploit this and gain the ability to execute arbitrary commands on the system. An attacker needs to be able to send authenticated...

CVE-2018-4020: Improper Neutralization of Special Elements used in an OS Command

An exploitable command injection vulnerability exists in the way Netgate pfSense CE 2.4.4-RELEASE processes the parameters of a specific POST request. The attacker can exploit this and gain the ability to execute arbitrary commands on the system. An attacker needs to be able to send authenticated...

PT-2018-16368

Name of the Vulnerable Software and Affected Versions Netgate pfSense CE version 2.4.4-RELEASE Description A command injection issue exists in the way Netgate pfSense CE processes the parameters of a specific POST request, allowing an attacker to execute arbitrary commands on the system. The...

PT-2018-16367

Name of the Vulnerable Software and Affected Versions pfSense CE version 2.4.4-RELEASE Description A command injection issue exists in the way pfSense CE processes the parameters of a specific POST request. This allows an attacker to execute arbitrary commands on the system by exploiting the powe...

PT-2018-16369

Name of the Vulnerable Software and Affected Versions pfSense CE version 2.4.4-RELEASE Description A command injection issue exists in the way pfSense CE processes the parameters of a specific POST request, allowing an attacker to execute arbitrary commands on the system. The attacker must be abl...

CVE-2018-4021: Improper Neutralization of Special Elements used in an OS Command

An exploitable command injection vulnerability exists in the way Netgate pfSense CE 2.4.4-RELEASE processes the parameters of a specific POST request. The attacker can exploit this and gain the ability to execute arbitrary commands on the system. An attacker needs to be able to send authenticated...