Unscored CVE-2023-29973 EUVD-2023-33503GHSA-q5cp-3jrf-3q9p

Pfsense CE version 2.6.0 is vulnerable to No rate limit which can lead to an attacker creating multiple malicious users in firewall.

Published Oct 24, 2023 · Updated Sep 17, 2024 · Assigned by mitre

Description

Pfsense CE version 2.6.0 is vulnerable to No rate limit which can lead to an attacker creating multiple malicious users in firewall.

Advisories 1

WID-SEC-2023-2795 Netgate pfSense: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen BSI CERT-Bund (WID) · Oct 31, 2023

References

https://www.esecforte.com/cve-2023-29973-no-rate-limit/