CVE-2022-40624

CRITICAL NUCLEI

Pfsense Pfblockerng < 2.1.4_27 - OS Command Injection

Title source: rule

Description

pfSense pfBlockerNG through 2.1.4_27 allows remote attackers to execute arbitrary OS commands as root via the HTTP Host header, a different vulnerability than CVE-2022-31814.

Exploits (1)

nomisec WORKING POC 2 stars

by dhammon · poc

https://github.com/dhammon/pfBlockerNg-CVE-2022-40624

View Code ZIP pw:eip

Nuclei Templates (1)

pfSense pfBlockerNG - OS Command Injection

CRITICALby ritikchaddha

Shodan: pfBlockerNG

FOFA: pfBlockerNG

References (3)

[Vendor Advisory] https://docs.netgate.com/pfsense/en/latest/packages/pfblocker.html

[Exploit, Third Party Advisory] https://github.com/dhammon/pfBlockerNg-CVE-2022-40624

[Broken Link] https://github.com/dhammon/pfBlockerNg-RCE

Scores

CVSS v3 9.8

EPSS 0.8466

EPSS Percentile 99.3%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation poc

Automatable yes

Technical Impact total

Details

CWE

CWE-78

Status published

Products (1)

pfsense/pfblockerng < 2.1.4_27

Published Dec 20, 2022

Tracked Since Feb 18, 2026