CVE-2018-16232

An authenticated command injection vulnerability exists in IPFire Firewall before 2.21 Core Update 124 in backup.cgi

published October 17, 2018

CVSS
—
EPSS
8%
Percentile
94.6
In the wild
Unconfirmed
What it is

An authenticated command injection vulnerability exists in IPFire Firewall before 2.21 Core Update 124 in backup.cgi. This allows an authenticated user with privileges for the affected page to execute arbitrary commands.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.07786 · 94.6th percentile
Published
2018-10-17T14:00Z
EPSS history
Timeline
  • 17 OCT 14:00Z
    An authenticated command injection vulnerability exists in IPFire Firewall before 2.21 Core Update 124 in backup.cgi
    cvelistv5