Improper access control... CVE-2022-26019

8.5 AV AC AU C I A
发布: 2022-03-31
修订: 2024-11-21

Improper access control vulnerability in pfSense CE and pfSense Plus (pfSense CE software versions prior to 2.6.0 and pfSense Plus software versions prior to 22.01) allows a remote attacker with the privilege to change NTP GPS settings to rewrite existing files on the file system, which may result in arbitrary command execution.

0%
暂无可用Exp或PoC
当前有2条受影响产品信息