CVE-2018-16055 — OS Command Injection in Pfsense

CWE-78 — OS Command Injection2 documents2 sources
Severity
8.8HIGHNVD
EPSS
12.9%
top 5.92%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Netgate Pfsense
Timeline
PublishedSep 26
Latest updateMay 13

Description

An authenticated command injection vulnerability exists in status_interfaces.php via dhcp_relinquish_lease() in pfSense before 2.4.4 due to its passing user input from the $_POST parameters "ifdescr" and "ipv" to a shell without escaping the contents of the variables. This allows an authenticated WebGUI user with privileges for the affected page to execute commands in the context of the root user when submitting a request to relinquish a DHCP lease for an interface which is configured to obtain …

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages1 packages

▶NVDnetgate/pfsense< 2.4.4

🔴Vulnerability Details

1
GHSA
GHSA-qg28-hqjm-95pc: An authenticated command injection vulnerability exists in status_interfaces↗2022-05-13
▶
CVE-2018-16055 — OS Command Injection in Pfsense | cvebase