CVE-2023-42326
An issue in Netgate pfSense v.2.7.0 allows a remote attacker to execute arbitrary code via a crafted request to the interfaces_gif_edit.php and interfaces_gre_edit.php components.
- Affected products
- Pfsense
- Netgate Pfsense
- ≤ 2.7.0
- Netgate Pfsense Plus
- ≤ 23.05.1
- CVSS 3.1
- 8.8 HIGH
- EPSS
- 64.0% (99th percentile)
- Weakness
- CWE-77
- NVD status
- Modified
- Published
- 2023-11-14
CVE-2023-42326 at NVD
3 known exploits for CVE-2023-42326
Proof-of-concept code and exploit modules indexed by Sploitus