Vulnerability · Published Mar 17, 2023 · Assigned by mitre
CVE-2023-27253
High 8.8
In plain English
A high-severity security flaw in the affected software. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 89.5% (higher than 99.8% of all known vulnerabilities). Ready-made attack tooling exists: Metasploit.
Severity (CVSS NVD)8.8High
Exploit odds (30 days)89.5%top 0.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack tooling1Metasploit
Official description
A command injection vulnerability in the function restore_rrddata() of Netgate pfSense v2.7.0 allows authenticated attackers to execute arbitrary commands via manipulating the contents of an XML file supplied to the component config.xml.