Unrated severityNVD Advisory· Published Dec 20, 2022· Updated Apr 17, 2025

CVE-2022-40624

Description

pfSense pfBlockerNG through 2.1.4_27 allows remote attackers to execute arbitrary OS commands as root via the HTTP Host header, a different vulnerability than CVE-2022-31814.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

pfSense/pfBlockerNGdescription
Pfsense/pfBlockerNGllm-create
Range: <=2.1.4_27

Patches

Vulnerability mechanics

References

docs.netgate.com/pfsense/en/latest/packages/pfblocker.htmlmitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.014
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000