Netgate pfSense pfBlockerNG Host CVE-2022-40624命令注入漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://nvd.nist.gov/vuln/detail/CVE-2022-40624
• https://www.incibe.es/en/incibe-cert/early-warning/vulnerabilities/cve-2022-40624
• https://www.cve.org/CVERecord?id=CVE-2022-40624
• https://access.redhat.com/security/cve/cve-2022-40624
• https://avd.aliyun.com/detail?id=AVD-2022-40624
• https://cve.circl.lu/vuln/cve-2022-40624
• https://github.com/dhammon/pfBlockerNg-CVE-2022-40624
• https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-40624.yaml
• https://github.com/advisories/GHSA-crg2-7qxv-74jh
• https://forum.netgate.com/topic/189579/rce-exploit
• https://pentest-tools.com/vulnerabilities-exploits/pfsense-pfblockerng-os-command-injection_26075
• https://www.keysight.com/ca/en/strikes/exploits/webapp/exec/cve_2022_40624_pfSense_pfBlockerNG_command_injection.xml

Related Vulnerabilities

• PoCpfsense-default-login: pfSense - Default Admin Credentials
• PoCCVE-2021-41282: pfSense - Arbitrary File Write
• PoCCVE-2022-31814: pfSense pfBlockerNG <=2.1..4_26 - OS Command Injection
• PoCCVE-2022-40624: pfSense pfBlockerNG - OS Command Injection
• Netgate pfSense CVE-2023-42325 跨站脚本漏洞
• Netgate PfSense diag_packet_capture.php 命令注入漏洞
• Netgate pfSense pfBlockerNG Host命令注入漏洞
• pfSense CVE-2021-41282远程代码执行漏洞
• Netgate pfSense CVE-2023-42326 命令注入漏洞
• Netgate pfSense firewall_alias.php 存储型跨站脚本漏洞
• Netgate pfSense restore_rrddata 命令注入漏洞
• PfSense PfBlockerNG shell上传漏洞(CVE-2022-31814)
• 惠尔顿上网行为管理系统netgatedel.php-命令执行获得Shell