PT-2025-29557 · Ipfire · Ipfire

Yann Cam · Published 2025-07-15 · Updated 2025-07-15 · CVE-2025-34116

Positive Technologies (AI Summary)

CVSS v4.0

8.7

High

Base vector

AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions IPFire versions prior to 2.19 Core Update 101

Description A remote command execution issue exists in IPFire due to a flaw in the proxy.cgi CGI interface. An authenticated attacker can inject arbitrary shell commands through crafted values in the NCSA user creation form fields, resulting in command execution with web server privileges.

Recommendations Update to version 2.19 Core Update 101 or later.

Exploit

Fix

Missing Authentication

OS Command Injection

RCE

Weakness Enumeration

CWE-306

CWE-78

CWE-20

Related Identifiers

CVE-2025-34116

Affected Products

Ipfire

References · 11

• 🔥 https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/linux/http/ipfire_proxy_exec.rb · Exploit
• 🔥 https://exploit-db.com/exploits/39765 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-34116 · Security Note
• https://vulncheck.com/advisories/ipfire-authenticated-rce · Note
• https://ipfire.org/news/ipfire-2-19-core-update-101-released · Patch, Vendor Advisory
• https://twitter.com/VulmonFeeds/status/1945115737242104079 · Twitter Post
• https://t.me/cvetracker/27854 · Telegram Post
• https://twitter.com/CVEnew/status/1945118959558385964 · Twitter Post
• https://asafety.fr/en/vuln-exploit-poc/xss-rce-ipfire-2-19-core-update-101-remote-command-execution · Note
• https://bugzilla.ipfire.org/show_bug.cgi?id=11087 · Note
• https://vulncheck/advisories/ipfire-authenticated-rce · Note