漏洞描述
pfBlockerNG是一个热门的默认未安装的pfSense插件。通常用于阻止来自整个国家或IP范围的入站连接。其2.1.4_26及以下版本包含该漏洞，攻击者可以通过未经验证的RCE漏洞来实现root访问。
PfSense PfBlockerNG shell上传漏洞(CVE-2022-31814)
PoC代码
暂无相关漏洞推荐
- POCCVE-2021-41282: pfSense - Arbitrary File Write
- POCCVE-2022-31814: pfSense pfBlockerNG <=2.1..4_26 - OS Command Injection
- POCCVE-2022-40624: pfSense pfBlockerNG - OS Command Injection
- POCCVE-2021-41282: pfSense - Arbitrary File Write
- POCCVE-2022-31814: pfSense pfBlockerNG <=2.1..4_26 - OS Command Injection
- POCCVE-2022-40624: pfSense pfBlockerNG - OS Command Injection
- 无POCNetgate pfSense CVE-2023-42325 跨站脚本漏洞
- 无POCNetgate PfSense diag_packet_capture.php 命令注入漏洞
- 无POCNetgate pfSense pfBlockerNG Host命令注入漏洞
- 无POCpfSense CVE-2021-41282远程代码执行漏洞
- 无POCNetgate pfSense pfBlockerNG Host CVE-2022-40624命令注入漏洞
- 无POCNetgate pfSense CVE-2023-42326 命令注入漏洞
- 无POCNetgate pfSense firewall_alias.php 存储型跨站脚本漏洞