UpHeron
All vulnerabilities

Servers and applications

CVE-2018-4020

An exploitable command injection vulnerability exists in the way Netgate pfSense CE 2.4.4-RELEASE processes the parameters of a specific POST request. The attacker can exploit this and gain the ability to execute arbitrary commands on the system. An attacker needs to be able to send authenticated POST requests to the administration web interface. Command injection is possible in the…

Severity
High 7.2
Published
3 Dec 2018
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Exploit chance
49% in the next 30 daysHigher than 98% of CVEs. EPSS by FIRST, 10 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
pfSenseServers and applications · cpe:a:netgate:pfsense
  • Version 2.4.4

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2018-4020
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2018-4020