CVE-2016-10709

pfSense before 2.3 allows remote authenticated users to execute arbitrary OS commands via a '|' character in the status_rrd_graph_img.php graph parameter…

published January 22, 2018

CVSS
—
EPSS
34%
Percentile
98.4
In the wild
Unconfirmed
What it is

pfSense before 2.3 allows remote authenticated users to execute arbitrary OS commands via a '|' character in the status_rrd_graph_img.php graph parameter, related to _rrd_graph_img.php.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.33708 · 98.4th percentile
Published
2018-01-22T04:00Z
EPSS history
Timeline
  • 22 JAN 04:00Z
    pfSense before 2.3 allows remote authenticated users to execute arbitrary OS commands via a '|' character in the status_rrd_graph_img.php graph parameter…
    cvelistv5