Vulnerability Details CVE-2019-16667
diag_command.php in pfSense 2.4.4-p3 allows CSRF via the txtCommand or txtRecallBuffer field, as demonstrated by executing OS commands. This occurs because csrf_callback() produces a "CSRF token expired" error and a Try Again button when a CSRF token is missing.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.492
EPSS Ranking 97.6%
CVSS Severity
CVSS v3 Score 8.8
CVSS v2 Score 6.8
References