CVE-2019-12949
In pfSense 2.4.4-p2 and 2.4.4-p3, if it is possible to trick an authenticated administrator into clicking on a button on a phishing page, an attacker can leverage XSS to upload arbitrary executable code, via diag_command.php and rrd_fetch_json.php (timePeriod parameter), to a server. Then, the remote attacker can run any command with root privileges on that server.
- Affected products
- Pfsense
- Netgate Pfsense
- = 2.4.4
- Fix
- Available
- CVSS 3.0
- 6.1 MEDIUM
- EPSS
- 3.0% (87th percentile)
- Weakness
- CWE-79
- NVD status
- Modified
- Published
- 2019-06-25
CVE-2019-12949 at NVD
2 known exploits for CVE-2019-12949
Proof-of-concept code and exploit modules indexed by Sploitus