← Back to browse · API

CVE-2022-40624

Severity
CRITICAL
CVSS
9.8
EPSS
0.17107
Risk score
45.19
CISA KEV
No
PoC
No
Published
2022-12-20
Modified
2025-04-17
First seen
2026-08-07
Aliases
EUVD-2022-43898, GHSA-CRG2-7QXV-74JH
Products
n/a:n/a n/a
Sources
euvd EUVD-2022-43898

Description

pfSense pfBlockerNG through 2.1.4_27 allows remote attackers to execute arbitrary OS commands as root via the HTTP Host header, a different vulnerability than CVE-2022-31814.

References