HTTP: ESF pfSense webConfigurator firewall_aliases_edit.php Input Validation Error

This signature detects attempts to exploit a known vulnerability in Electric Sheep Fencing pfSense firewall. The vulnerability is due to insufficient validation of user supplied input when processing the addressN parameter in firewall_aliases_edit.php. A remote authenticated attacker could exploit this vulnerability by sending a malicious request using the vulnerable parameter to the firewall. Successful exploitation could lead to remote code execution under the security context of the root user.

Short Name

HTTP:MISC:ESF-PFSENSE-RCE

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: ESF pfSense webConfigurator firewall_aliases_edit.php Input Validation Error

Found a potential security threat?