CVE-2023-42326

An issue in Netgate pfSense v.2.7.0 allows a remote attacker to execute arbitrary code via a crafted request to the interfaces_gif_edit.php and interfaces_gre_edit.php components.

CVSS v3.1

8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

64.02% chance of exploitation in the next 30 days, 99th percentile

Published

2023-11-14

Updated

2024-08-02

Proof-of-concept exploits (2)

• bl4ckarch/CVE-2023-423264★ · 2024-11-05
• bl4ckarch/pf-pwnme4★ · 2024-11-05

References

• CVE Record
• NVD entry

Related

• CVE-2023-27163
• CVE-2023-42323
• CVE-2023-42334
• CVE-2023-42320
• CVE-2023-42335
• CVE-2023-42308