CVE-2022-26019

Published: 2022-03-31T08:15Z

Last Modified: 2024-11-21T06:53Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Improper access control vulnerability in pfSense CE and pfSense Plus (pfSense CE software versions prior to 2.6.0 and pfSense Plus software versions prior to 22.01) allows a remote attacker with the privilege to change NTP GPS settings to rewrite existing files on the file system, which may result in arbitrary command execution. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt