CVE-2023-27253

highpriority · attend · 76EPSS 0.895 · 100 %ileexploit · weaponizedDEEUUS

grimoire priorityP1 · Urgent

Exploitable?

Public exploit

2 exploits · weaponized

Likely / severe?

89.5% (100th) EPSS

CVSS 8.8 · high

Is it mine?

2 products

Check your exposure

Who says so?

4 sources

cnnvd · enisa_euvd · nvd · cert_bund

EPSS · scored 2026-10-26

A command injection vulnerability in the function restore_rrddata() of Netgate pfSense v2.7.0 allows authenticated attackers to execute arbitrary commands via manipulating the contents of an XML file supplied to the component config.xml.

cvss

Technical severity, 0–10. One row per scoring source.

8.8

010

base score 0–10 · higher = more severe · hover a vector to decode

v3.18.8highCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:Hprimary · NVD / NIST USexploitability 2.8 · impact 5.9

v3.18.8highCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:Hsecondary · CVSS-BT (t0sche)

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: none · Automatable: no · Technical Impact: totalcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-91USprimary

exploits (2)

Public proof-of-concept and weaponised exploit code.

exploit/unix/http/pfsense_config_data_execpfSense Restore RRD Data Command Injectionweaponized · metasploit
EDB-51608pfSense v2.7.0 - OS Command InjectionPoC · exploit_db

affected products (2)

Products and version ranges known to be affected.

n/a n/a≤ n/aenisa_euvdEU
netgate pfsense= 2.7.0nvdUScpe:2.3:a:netgate:pfsense:*:*:*:*:*:*:*:*

advisories (1)

Vendor and ecosystem advisories describing this.

WID-SEC-W-2023-0681Netgate pfSense: Schwachstelle ermöglicht CodeausführungDeutsch2023-03-19csaf · cert_bundDE
Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Netgate pfSense ausnutzen, um beliebigen Programmcode auszuführen.

also known as (3)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd nvd cert_bund NVD CVE.org MITRE

published 2023-03-17modified 2026-06-17

related (202)

Related entries.

ID	severity	EPSS	exploitable	published
CVE-2020-1147US	high7.8OT critical	94.0% (100th)	KEV	2020-07-14
A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of XML file input, aka '.…
CVE-2020-0646US	critical9.8OT critical	99.2% (100th)	KEV	2020-01-14
A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka '.NET Framework Remote Code Execution Injection Vulnerability'.
CVE-2023-46214US	high8.8	89.2% (100th)	Exploit	2023-11-16
In Splunk Enterprise versions below 9.0.7 and 9.1.2, Splunk Enterprise does not safely sanitize extensible stylesheet language transformations (XSLT) that users supply. This means…
CVE-2008-0016US	high10.0	43.9% (99th)	Exploit	2008-09-24
Stack-based buffer overflow in the URL parsing implementation in Mozilla Firefox before 2.0.0.17 and SeaMonkey before 1.1.12 allows remote attackers to execute arbitrary code via a…
CVE-2024-53675US	high7.5	81.0% (100th)	—	2024-11-26
An XML external entity injection (XXE) vulnerability in HPE Insight Remote Support may allow remote users to disclose information in certain cases.

+197 more

references (11)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan