Improper access control vulnerability in pfSense CE and pfSense Plus (pfSense CE software versions prior to 2.6.0 and pfSense Plus software versions prior to 22.01) allows a remote attacker with the privilege to change NTP GPS settings to rewrite existing files on the file system, which may result in arbitrary command execution.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: jpcert
Published: 2022-03-31T07:21:31
Updated: 2024-08-03T04:56:37.518Z
Reserved: 2022-03-06T00:00:00
Link: CVE-2022-26019
Vulnrichment
No data.
NVD
Status : Modified
Published: 2022-03-31T08:15:08.387
Modified: 2024-11-21T06:53:19.430
Link: CVE-2022-26019
Redhat
No data.