漏洞描述
Netgate PfSense存在命令注入漏洞。此漏洞是由于diag_packet_capture.php对于用户发送的请求缺乏校验导致的。
Netgate PfSense diag_packet_capture.php 命令注入漏洞
PoC代码
暂无相关漏洞推荐
- POCCVE-2021-41282: pfSense - Arbitrary File Write
- POCCVE-2022-31814: pfSense pfBlockerNG <=2.1..4_26 - OS Command Injection
- POCCVE-2022-40624: pfSense pfBlockerNG - OS Command Injection
- POCCVE-2021-41282: pfSense - Arbitrary File Write
- POCCVE-2022-31814: pfSense pfBlockerNG <=2.1..4_26 - OS Command Injection
- POCCVE-2022-40624: pfSense pfBlockerNG - OS Command Injection
- 无POCNetgate pfSense CVE-2023-42325 跨站脚本漏洞
- 无POCNetgate pfSense pfBlockerNG Host命令注入漏洞
- 无POCpfSense CVE-2021-41282远程代码执行漏洞
- 无POCNetgate pfSense pfBlockerNG Host CVE-2022-40624命令注入漏洞
- 无POCNetgate pfSense CVE-2023-42326 命令注入漏洞
- 无POCNetgate pfSense firewall_alias.php 存储型跨站脚本漏洞
- 无POCNetgate pfSense restore_rrddata 命令注入漏洞