Vulnerabilities (CVE)

Filtered by vendor Netgate Subscribe
Filtered by product Pfsense Plus
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-42326 1 Netgate 2 Pfsense, Pfsense Plus 2023-12-12 N/A 8.8 HIGH
An issue in Netgate pfSense v.2.7.0 allows a remote attacker to execute arbitrary code via a crafted request to the interfaces_gif_edit.php and interfaces_gre_edit.php components.
CVE-2023-48123 1 Netgate 2 Pfsense, Pfsense Plus 2023-12-12 N/A 8.8 HIGH
An issue in Netgate pfSense Plus v.23.05.1 and before and pfSense CE v.2.7.0 allows a remote attacker to execute arbitrary code via a crafted request to the packet_capture.php file.
CVE-2022-26019 1 Netgate 2 Pfsense, Pfsense Plus 2023-08-08 8.5 HIGH 8.8 HIGH
Improper access control vulnerability in pfSense CE and pfSense Plus (pfSense CE software versions prior to 2.6.0 and pfSense Plus software versions prior to 22.01) allows a remote attacker with the privilege to change NTP GPS settings to rewrite existing files on the file system, which may result in arbitrary command execution.