DeutschShown in its original language — a full translation is planned for a future version.
Netgate pfSense: Mehrere Schwachstellen
view advisory published 2025-05-15
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Netgate pfSense ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen oder beliebigen Programmcode auszuführen.
01
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-57273US | — | — | ||
Netgate pfSense CE (prior to 2.8.0 beta release) and corresponding Plus builds is vulnerable to Cross-site scripting (XSS) in the Automatic Configuration Backup (ACB) service, allo… | ||||
| CVE-2024-54780US | — | — | ||
Netgate pfSense CE (prior to 2.8.0 beta release) and corresponding Plus builds are vulnerable to command injection in the OpenVPN widget due to improper sanitization of user-suppli… | ||||
| CVE-2024-54779US | — | — | ||
Netgate pfSense CE (prior to 2.8.0 beta release) and corresponding Plus builds is vulnerable to Cross Site Scripting (XSS) in widgets/log.widget.php. | ||||
02
references
External citations — patches, advisories, analysis.
- Brillantit Blog vom 2025-05-15external
- Netgate pfSence Security Advisory PFSENSE-SA-25_01.WEBGUI vom 2025-05-16external
- Netgate pfSence Security Advisory PFSENSE-SA-25_02.WEBGUI vom 2025-05-16external
- Netgate pfSence Security Advisory PFSENSE-SA-25_03.WEBGUI vom 2025-05-16external
- Netgate pfSence Security Advisory PFSENSE-SA-25_04.WEBGUI vom 2025-05-16external
- NIST Vulnerability Database vom 2025-05-15external
- NIST Vulnerability Database vom 2025-05-15external
- NIST Vulnerability Database vom 2025-05-15external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan