EXECUTIVE SUMMARY:
A critical security vulnerability has been discovered in pfSense, identified as CVE-2024-46538, which allows attackers to execute arbitrary code on affected systems through a stored cross-site scripting (XSS) flaw. The vulnerability arises from inadequate input validation in the interfaces_groups_edit.php file, where user-supplied data is stored without proper sanitization. Malicious actors can inject JavaScript code that, when viewed by an administrator, executes and potentially leads to remote code execution (RCE) via the diag_command.php endpoint. This vulnerability can be exploited by attackers with limited privileges, allowing them to inject malicious code into the interface group’s configuration, which is then triggered when a higher-privileged administrator accesses the compromised page. The issue has been addressed in later versions of pfSense, and users are strongly advised to mitigate the risk. Organizations should promptly patch their systems, review firewall configurations, and consider employing defense-in-depth strategies to reduce exposure.[/subscribe_to_unlock_form]
EXECUTIVE SUMMARY:
A critical security vulnerability has been discovered in pfSense, identified as CVE-2024-46538, which allows attackers to execute arbitrary code on affected systems through a stored cross-site scripting (XSS) flaw. The vulnerability arises from inadequate input validation in the interfaces_groups_edit.php file, where user-supplied data is stored without proper sanitization. Malicious actors can inject JavaScript code that, when viewed by an administrator, executes and potentially leads to remote code execution (RCE) via the diag_command.php endpoint. This vulnerability can be exploited by attackers with limited privileges, allowing them to inject malicious code into the interface group’s configuration, which is then triggered when a higher-privileged administrator accesses the compromised page. The issue has been addressed in later versions of pfSense, and users are strongly advised to mitigate the risk. Organizations should promptly patch their systems, review firewall configurations, and consider employing defense-in-depth strategies to reduce exposure.[emaillocker id="1283"]
RECOMMENDATION:
We strongly recommend you update pfSense products as below versions:
REFERENCES:
The following reports contain further technical details:
https://cybersecuritynews.com/pfsense-stored-xss-vulnerability/