PT-2026-115193 · Netgate · Pfsense Ce
CVSS v3.1
5.5
Média
| Vetor | AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:L |
Netgate pfSense CE from 2.7.1 through 2.9.0 contains a CRLF injection vulnerability in services unbound advanced.php that allows authenticated users with DNS Resolver: Advanced privilege to inject Unbound directives. Attackers can embed CR/LF characters in the unvalidated sock queue timeout parameter, which is written raw into unbound.conf, to override local records and forwarding for all clients.
Exploit
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Pfsense Ce