The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
pfSense before 2.1.4 allows remote authenticated users to execute arbitrary commands via (1) the hostname value to diag_dns.php in a Create Alias action, (2) the smartmonemail value to diag_smart.php, or (3) the database value to status_rrd_graph_img.php.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Pfsense | — | Upgrade to pfSense version 2.1.4 | Jun 30, 2017 | Jul 2, 2014 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub