CVE:CVE-2020-21487
CNNVD:CNNVD-202304-152
pfSense是一套基于FreeBSD Linux的网络防火墙。
Netgate pfSense 2.4.4版本、ACME package v.0.6.3版本存在安全漏洞。攻击者利用该漏洞通过acme_certificates.php的RootFolder字段执行任意代码。
solution:Upgrade netgate pfsense to a higher version than 2.4.4,and avoid the version 2.4.4; Upgrade netgate pfsense_acme_package to a higher version than 0.6.3,and avoid the version 0.6.3