vulnerability
Pi-hole AdminLTE: CVE-2020-8816: DHCP MAC OS Command Execution
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 9 | (AV:N/AC:L/Au:S/C:P/I:P/A:P) | Mar 28, 2020 | Feb 28, 2022 | May 3, 2022 |
Severity
9
CVSS
(AV:N/AC:L/Au:S/C:P/I:P/A:P)
Published
Mar 28, 2020
Added
Feb 28, 2022
Modified
May 3, 2022
Description
Pi-hole Web v4.3.2 (aka AdminLTE) allows Remote Code Execution by privileged dashboard users via a crafted DHCP static lease.
This check requires the Metasploit Remote Check Service to be enabled on Scan Engines. Please see the Metasploit Remote Check Service documentation for instructions on how to enable this functionality.
Solution
pi-hole-adminlte-upgrade-latest
Rapid7 Labs
2026 Global Threat Landscape Report
The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.