← Database

CVE-2022-40624

CRITICAL CVSS: 9.8 Published: 2022-12-20 Modified: 2026-06-17

Description

pfSense pfBlockerNG through 2.1.4_27 allows remote attackers to execute arbitrary OS commands as root via the HTTP Host header, a different vulnerability than CVE-2022-31814.

Affected Platforms

Pfsense Pfblockerng

Weakness Type

CWE-78, CWE-78

References