Skip to content
OpenAdvisories
Low WID-SEC-2025-2016 7 CVEs

Netgate pfSense: Mehrere Schwachstellen

Published Sep 9, 2025 · Updated Sep 9, 2025 · de-DE

Vendor: Netgate Product: pfSense

Summary

Ein entfernter, authentisierter oder anonymer Angreifer kann mehrere Schwachstellen in Netgate pfSense ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen und vertrauliche Informationen offenzulegen.

Product

pfSense ist eine Software-Edge-Firewall mit Router- und VPN-Funktionalität.

Vulnerabilities 7

  • Medium 5.3
    CVE-2025-34173

    Netgate pfSense CE Snort package v4.1.6_25 Directory Traversal Information Disclosure

    In pfSense CE /usr/local/www/snort/snort_ip_reputation.php, the value of the iplist parameter is not sanitized of directory traversal-related characters/strings before being used to check if a file exists. While the contents of the file cannot be read, the se…

    Netgate pfSense CE
  • Medium 5.3
    CVE-2025-34176 EPSS 20%

    Netgate pfSense CE Suricata Package v7.0.8_2 Directory Traversal Information Disclosure

    In pfSense CE /suricata/suricata_ip_reputation.php, the value of the iplist parameter is not sanitized of directory traversal-related strings/characters. This value is directly used in a file existence check operation. While the contents of the file cannot be…

    Netgate pfSense CE
  • Medium 5.1
    CVE-2025-34174 EPSS 17%

    Netgate pfSense CE Status_Traffic_Totals Package v2.3.2_7 Stored Cross-Site Scripting

    In pfSense CE /usr/local/www/status_traffic_totals.php, the value of the start-day parameter is not ensured to be a numeric value or sanitized of HTML-related characters/strings before being directly displayed in the input box. This value can be saved as the …

    Netgate pfSense CE
  • Medium 5.1
    CVE-2025-34175 EPSS 24%

    Netgate pfSense CE Suricata package v7.0.8_2 Reflected Cross-Site Scripting

    In pfSense CE /usr/local/www/suricata/suricata_filecheck.php, the value of the filehash parameter is directly displayed without sanitizing for HTML-related characters/strings. This can result in reflected cross-site scripting if the victim is authenticated.

    Netgate pfSense CE
  • Medium 5.1
    CVE-2025-34177

    Netgate pfSense CE Suricata package v7.0.8_2 Stored Cross-Site Scripting

    In pfSense CE /suricata/suricata_flow_stream.php, the value of the policy_name parameter is not sanitized of HTML-related strings/characters before being directly displayed. This can result in stored cross-site scripting. The attacker must be authenticated wi…

    Netgate pfSense CE
  • Medium 5.1
    CVE-2025-34178

    Netgate pfSense CE Suricata package v7.0.8_2 Stored Cross-Site Scripting

    In pfSense CE /suricata/suricata_app_parsers.php, the value of the policy_name parameter is not sanitized of HTML-related strings/characters before being directly displayed. This can result in stored cross-site scripting. The attacker must be authenticated wi…

    Netgate pfSense CE
  • Medium 4.8
    CVE-2025-34172

    Netgate pfSense CE HAProxy Package 0.63_10 Reflected Cross-Site Scripting

    In pfSense CE /usr/local/www/haproxy/haproxy_stats.php, the value of the showsticktablecontent parameter is displayed after being read from HTTP GET requests. This can enable reflected cross-site scripting when the victim is authenticated.

    Netgate pfSense CE

Revision history

  1. #1

    Initiale Fassung

References