Rapid7 Vulnerability & Exploit Database

pfSense: pfSense-SA-17_02.webgui: Arbitrary Code Execution

Free InsightVM Trial No Credit Card Necessary
2024 Attack Intel Report Latest research by Rapid7 Labs
Back to Search

pfSense: pfSense-SA-17_02.webgui: Arbitrary Code Execution

Severity
4
CVSS
(AV:L/AC:M/Au:N/C:P/I:P/A:P)
Published
02/10/2017
Created
07/25/2018
Added
08/25/2017
Modified
08/25/2017

Description

A command-injection vulnerability exists in wizard.php via update_config_field() due to its passing user input through eval(), especially in its handling of interfaces_selection type fields. This allows an authenticated WebGUI user with privileges for wizard.php to execute commands in the context of the root user. A user on version 2.3.2_1 or earlier of the pfSense software, granted limited access to the pfSense software WebGUI including access to wizard.php, could leverage these vulnerabilities to gain increased privileges, read other files, execute commands, or perform other alterations. This is not relevant for admin-level users as there are other deliberate means by which an administrator could run commands.

Solution(s)

  • pfsense-upgrade-latest

References

insightVM

Advanced vulnerability management analytics and reporting.
Key Features
  • Lightweight Endpoint Agent
  • Live Dashboards
  • Real Risk Prioritization
  • IT-Integrated Remediation Projects
  • Cloud, Virtual, and Container Assessment
  • Integrated Threat Feeds
  • Easy-to-Use RESTful API
  • Automation-Assisted Patching
  • Automated Containment
Free InsightVM Trial View All Features

With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.

– Scott Cheney, Manager of Information Security, Sierra View Medical Center

;