pfSense CE and pfSense Plus vulnerabilities

2 known vulnerabilities in pfSense CE and pfSense Plus from pfSense. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  pfSense CE and pfSense Plus: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2022-26019Mar 31, 2022pfSenseEPSS 4.5%

  Improper access control vulnerability in pfSense CE and pfSense Plus (pfSense CE software versions prior to 2.6.0 and pfSense Plus software versions prior to 22.01) allows a remote attacker with the privilege to change NTP GPS settings to rewrite existing file

• 8.8 High severity

  Improper input validation vulnerability in pfSense CE and pfSense Plus (pfSense CE software…

  CVE-2022-24299Mar 31, 2022pfSenseEPSS 1.93%

  Improper input validation vulnerability in pfSense CE and pfSense Plus (pfSense CE software versions prior to 2.6.0 and pfSense Plus software versions prior to 22.01) allows a remote attacker with the privilege to change OpenVPN client or server settings to ex