PT-2023-21032 · Netgate · Pfsense

Published 2023-03-17 · Updated 2023-07-13 · CVE-2023-27253

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Netgate pfSense version 2.7.0

Description A command injection issue in the restore rrddata() function allows authenticated attackers to execute arbitrary commands by manipulating the contents of an XML file supplied to the config.xml component.

Recommendations For Netgate pfSense version 2.7.0, consider disabling the restore rrddata() function until a patch is available to prevent exploitation. Restrict access to the config.xml component to minimize the risk of command injection attacks.

Exploit

Fix

Weakness Enumeration

CWE-91

Related Identifiers

CVE-2023-27253

Affected Products

Pfsense

References · 9

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/http/pfsense_config_data_exec.rb · Exploit
• 🔥 https://exploit-db.com/exploits/51608 · Exploit
• https://github.com/pfsense/pfsense/commit/ca80d18493f8f91b21933ebd6b714215ae1e5e94 · Patch
• https://redmine.pfsense.org/issues/13935 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-27253 · Security Note
• https://osv.dev/vulnerability/CVE-2023-27253 · Vendor Advisory
• https://t.me/cibsecurity/60279 · Telegram Post
• https://t.me/cvenotify/46423 · Telegram Post
• http://packetstormsecurity.com/files/173487/pfSense-Restore-RRD-Data-Command-Injection.html · Note