Exploitation Summary
EIP tracks 2 public exploits for CVE-2023-27253.
PoCs published by Emir Polat, including Metasploit module exploits/unix/http/pfsense_config_data_exec.
AI-analyzed exploit summary This Metasploit module exploits an authenticated command injection vulnerability in pfSense's restore_rrddata() function, allowing arbitrary OS command execution as root. It leverages CSRF token handling and file upload manipulation to inject payloads.
Description
A command injection vulnerability in the function restore_rrddata() of Netgate pfSense v2.7.0 allows authenticated attackers to execute arbitrary commands via manipulating the contents of an XML file supplied to the component config.xml.
Exploits (2)
This Metasploit module exploits an authenticated command injection vulnerability in pfSense's restore_rrddata() function, allowing arbitrary OS command execution as root. It leverages CSRF token handling and file upload manipulation to inject payloads.
This Metasploit module exploits an authenticated command injection vulnerability in pfSense's restore_rrddata() function, allowing root-level command execution. It leverages CSRF token handling and multipart form data to inject payloads into the backup/restore functionality.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H