📦

pfblockerng

Vendor: pfsense

Login to add this product to WatchStack
Actively Exploited 0 CISA KEV List
PoC / Exploits 2 Code Available
Total RCEs 2 Remote Access
Total CVEs 1 Total Indexed
Avg. EPSS 89.51% Exploit Prob.
Latest CVE CVE-2022-40624 Dec 20

Security Vulnerability Index

Page 1 / 1
9.8 CVSS
CVE-2022-40624
RCE Exploit Found

pfSense pfBlockerNG through 2.1.4_27 allows remote attackers to execute arbitrary OS commands as root via the HTTP Host header, a different vulnerability than CVE-2022-31814.

EPSS: 84.65%
9.8 CVSS
CVE-2022-31814
RCE Exploit Found

pfSense pfBlockerNG through 2.1.4_26 allows remote attackers to execute arbitrary OS commands as root via shell metacharacters in the HTTP Host header. NOTE: 3.x is unaffected.

EPSS: 94.36%