CVE-2023-48123

An issue in Netgate pfSense Plus v.23.05.1 and before and pfSense CE v.2.7.0 allows a remote attacker to execute arbitrary code via a crafted request to the packet_capture.php file.

Affected products

Pfsense Ce, Pfsense Plus

Netgate Pfsense

≤ 2.7.0

Netgate Pfsense Plus

≤ 23.05.1

Fix

Available

CVSS 3.1

8.8 HIGH

EPSS

67.8% (99th percentile)

NVD status

Modified

Published

2023-12-06