Netgate pfSense CE Command Injection Vulnerability (CNVD-2018-26995)

Netgate pfSense CE is the United States Netgate company's set of free open source FreeBSD-based firewall and router software. A command injection vulnerability exists in the 'powerdacmode' POST parameter in Netgate pfSense CE version 2.4.4-RELEASE, which can be exploited by an attacker to execute...

PT-2018-16368

Name of the Vulnerable Software and Affected Versions Netgate pfSense CE version 2.4.4-RELEASE Description A command injection issue exists in the way Netgate pfSense CE processes the parameters of a specific POST request, allowing an attacker to execute arbitrary commands on the system. The...