Vulnerability CVE-2023-27253
Published: 2023-03-17   Modified: 2023-03-18

Description:
A command injection vulnerability in the function restore_rrddata() of Netgate pfSense v2.7.0 allows authenticated attackers to execute arbitrary commands via manipulating the contents of an XML file supplied to the component config.xml.

 References:
https://redmine.pfsense.org/issues/13935
https://github.com/pfsense/pfsense/commit/ca80d18493f8f91b21933ebd6b714215ae1e5e94
Copyright 2026, cxsecurity.com

 

Back to Top