Описание
The expiretable configuration in pfSense 2.4.4_1 establishes block durations that are incompatible with the block durations implemented by sshguard, which might make it easier for attackers to bypass intended access restrictions.
Ссылки
- ExploitIssue TrackingPatchVendor Advisory
- ExploitIssue TrackingPatchVendor Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:netgate:pfsense:2.4.4:p1:*:*:*:*:*:*
EPSS
Процентиль: 38%
0.00167
Низкий
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
CWE-732
Связанные уязвимости
CVSS3: 7.5
github
больше 3 лет назад
The expiretable configuration in pfSense 2.4.4_1 establishes block durations that are incompatible with the block durations implemented by sshguard, which might make it easier for attackers to bypass intended access restrictions.
EPSS
Процентиль: 38%
0.00167
Низкий
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
CWE-732