Multiple pfSense Firewall Vulnerabilities Let Attackers Inject Malicious Codes

Three critical vulnerabilities in pfSense firewall software that could allow authenticated attackers to inject malicious code, manipulate cloud backups, and potentially achieve remote code execution.  The vulnerabilities affect both pfSense Community Edition (CE) prior to version 2.8.0 beta and corresponding pfSense Plus builds. These flaws, CVE-2024-57273, CVE-2024-54780, and CVE-2024-54779, exploit weaknesses in the Automatic Configuration […]

The post Multiple pfSense Firewall Vulnerabilities Let Attackers Inject Malicious Codes appeared first on Cyber Security News.