1,450+ pfSense Servers Vulnerable to Remote Code Execution Attacks via Exploit Chain

Researchers discovered two vulnerabilities in pfSense CE related to Cross-Site Scripting (XSS) and Command Injection that allow an attacker to execute arbitrary commands on a pfSense appliance. An attacker with RCE capabilities can control the firewall, monitor traffic on the local network, or target services within the network. pfSense is a prominent open-source firewall solution […]

The post 1,450+ pfSense Servers Vulnerable to Remote Code Execution Attacks via Exploit Chain appeared first on GBHackers on Security | #1 Globally Trusted …

attacker attacks capabilities code code execution command command injection control cross-site exploit exploit chain firewall injection local local network monitor network pfsense rce remote code remote code execution researchers scripting servers services target traffic vulnerabilities vulnerable xss