CVE-2023-27253

This Metasploit module exploits an authenticated command injection vulnerability in pfSense's restore_rrddata() function, allowing arbitrary OS command execution as root. It leverages CSRF token handling and file upload manipulation to inject payloads.

This Metasploit module exploits an authenticated command injection vulnerability in pfSense's restore_rrddata() function, allowing root-level command execution. It leverages CSRF token handling and multipart form data to inject payloads into the backup/restore functionality.