Unrated severityNVD Advisory· Published Mar 31, 2022· Updated Aug 3, 2024

CVE-2022-24299

Description

Improper input validation vulnerability in pfSense CE and pfSense Plus (pfSense CE software versions prior to 2.6.0 and pfSense Plus software versions prior to 22.01) allows a remote attacker with the privilege to change OpenVPN client or server settings to execute an arbitrary command.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Netgate/Pfsensellm-fuzzy
Range: <2.6.0
pfSense/pfSense CE and pfSense Plusv5
Range: pfSense CE software versions prior to 2.6.0 and pfSense Plus software versions prior to 22.01

Patches

Vulnerability mechanics

References

docs.netgate.com/downloads/pfSense-SA-22_03.webgui.ascmitrex_refsource_MISC
jvn.jp/en/jp/JVN87751554/index.htmlmitrex_refsource_MISC

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000