CVE-2021-41282

    Dashboard / Vulnerabilities / CVE-2021-41282

    CVE-2021-41282

    Published: 1 Mar 2022Last Modified: 9 Jul 2026

    Summary:

    Details: diag_routes.php in pfSense 2.5.2 allows sed data injection. Authenticated users are intended to be able to view data about the routes set in the firewall. The data is retrieved by executing the netstat utility, and then its output is parsed via the sed utility. Although the common protection mechanisms against command injection (i.e., the usage of the escapeshellarg function for the arguments) are used, it is still possible to inject sed-specific code and write an arbitrary file in an arbitrary location.

    References: https://docs.netgate.com/pfsense/en/latest/releases/22-01_2-6-0.html, https://www.shielder.it/advisories/, http://packetstormsecurity.com/files/166208/pfSense-2.5.2-Shell-Upload.html, https://www.shielder.it/advisories/pfsense-remote-command-execution/

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 81891ef87be63352e1c32d28ca9fc08bbf641989
    Fixed -None

    Affected versions

    2.5.2

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2021-41282 | CVE-DB