Description

pfSense pfBlockerNG through 2.1.4_26 allows remote attackers to execute arbitrary OS commands as root via shell metacharacters in the HTTP Host header. NOTE: 3.x is unaffected.

INFO

Published Date :

Sept. 5, 2022, 4:15 p.m.

Last Modified :

July 3, 2024, 1:38 a.m.

Remotely Exploitable :

Yes !

Impact Score :

5.9

Exploitability Score :

3.9
Public PoC/Exploit Available at Github

CVE-2022-31814 has a 18 public PoC/Exploit available at Github. Go to the Public Exploits tab to see the list.

Affected Products

The following products are affected by CVE-2022-31814 vulnerability. Even if cvefeed.io is aware of the exact versions of the products that are affected, the information is not represented in the table below.

ID Vendor Product Action
1 Netgate pfblockerng
References to Advisories, Solutions, and Tools

We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).

This script is a proof-of-concept exploit for pfBlockerNG <= 2.1.4_26 that allows for remote code execution. It takes a single target URL or a list of URLs, tries to upload a shell using multiple payloads, executes a command, and then deletes the shell.

Python

Updated: 2 months, 3 weeks ago
0 stars 0 fork 0 watcher
Born at : Aug. 12, 2024, 12:50 p.m. This repo has been linked 1 different CVEs too.

Updated Exploit - pfBlockerNG <= 2.1.4_26 Unauth RCE (CVE-2022-31814)

Python

Updated: 1 month, 4 weeks ago
23 stars 2 fork 2 watcher
Born at : July 23, 2024, 9:44 a.m. This repo has been linked 1 different CVEs too.

All CVE - PoC in GitHub

poc proofofconcept tester allcve cvegithub cvenew cvepoc cveupdate

Updated: 2 months, 1 week ago
5 stars 2 fork 2 watcher
Born at : March 22, 2024, 3:58 p.m. This repo has been linked 928 different CVEs too.

None

Updated: 7 months, 3 weeks ago
1 stars 0 fork 0 watcher
Born at : March 11, 2024, 1:21 p.m. This repo has been linked 930 different CVEs too.

None

Python PHP

Updated: 1 year, 4 months ago
0 stars 0 fork 0 watcher
Born at : June 11, 2023, 1:32 a.m. This repo has been linked 1 different CVEs too.

None

Updated: 1 year, 7 months ago
0 stars 2 fork 2 watcher
Born at : April 8, 2023, 6:19 a.m. This repo has been linked 923 different CVEs too.

pfBlockerNG <= 2.1.4_26 Unauth RCE (CVE-2022-31814)

Python

Updated: 2 months, 3 weeks ago
1 stars 0 fork 0 watcher
Born at : March 26, 2023, 5:22 p.m. This repo has been linked 1 different CVEs too.

pfBlockerNG <= 2.1.4_26 Unauth RCE (CVE-2022-31814)

Python

Updated: 1 month, 4 weeks ago
3 stars 1 fork 1 watcher
Born at : March 26, 2023, 12:18 a.m. This repo has been linked 1 different CVEs too.

CVE-2022-31814

rce bug exploit hunting python rce-exploit rce-scanner web webapplication

Updated: 1 year, 1 month ago
2 stars 0 fork 0 watcher
Born at : March 5, 2023, 12:56 a.m. This repo has been linked 1 different CVEs too.

None

Python

Updated: 1 year, 8 months ago
1 stars 0 fork 0 watcher
Born at : March 1, 2023, 1:24 p.m. This repo has been linked 1 different CVEs too.

None

Updated: 1 year, 8 months ago
0 stars 0 fork 0 watcher
Born at : Feb. 22, 2023, 12:38 p.m. This repo has been linked 1 different CVEs too.

None

Updated: 8 months, 3 weeks ago
20 stars 3 fork 3 watcher
Born at : Feb. 14, 2023, 6:10 p.m. This repo has been linked 921 different CVEs too.

None

Updated: 8 months, 2 weeks ago
2 stars 2 fork 2 watcher
Born at : Nov. 25, 2022, 5:43 p.m. This repo has been linked 930 different CVEs too.

CVE-2022-31814 Exploitation Toolkit.

exploit hacking pfsense security-tools

Python Shell

Updated: 2 months, 3 weeks ago
4 stars 0 fork 0 watcher
Born at : Sept. 18, 2022, 11:10 a.m. This repo has been linked 1 different CVEs too.

None

Updated: 3 months, 1 week ago
1 stars 0 fork 0 watcher
Born at : Sept. 15, 2022, 3:24 a.m. This repo has been linked 2 different CVEs too.

Results are limited to the first 15 repositories due to potential performance issues.

The following list is the news that have been mention CVE-2022-31814 vulnerability anywhere in the article.

  • Cyber Security News
Weekly Cyber Security News Letter – Data Breaches, Vulnerability, Cyber Attack & More

Our Weekly Cybersecurity Newsletter is your personal radar that will help you to surf through the ever-changing digital threat landscape. This analysis, however, is not just a news report but aims to ... Read more

Published Date: Aug 11, 2024 (2 months, 3 weeks ago)
  • Cyber Security News
Open Source Firewall pfsense Vulnerable to Remote Code Execution Attacks

A popular open-source firewall software pfSense vulnerability has been identified, allowing for remote code execution (RCE) attacks. The vulnerability, tracked as CVE-2022-31814, highlights potential ... Read more

Published Date: Aug 09, 2024 (2 months, 3 weeks ago)

The following table lists the changes that have been made to the CVE-2022-31814 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.

  • CVE Modified by 134c704f-9b21-4f2e-91b3-4a467353bcc0

    Jul. 03, 2024

    Action Type Old Value New Value
    Added CWE CISA-ADP CWE-78
    Added CVSS V3.1 CISA-ADP AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
  • CVE Modified by [email protected]

    May. 14, 2024

    Action Type Old Value New Value
    Added Reference MITRE https://github.com/pfsense/FreeBSD-ports/pull/1169 [No types assigned]
    Added Reference MITRE https://github.com/pfsense/FreeBSD-ports/pull/1169/commits/071bdcf2d918c3e51cde11cf81fbd9b6f0379d7e [No types assigned]
  • CWE Remap by [email protected]

    Aug. 08, 2023

    Action Type Old Value New Value
    Changed CWE NVD-CWE-noinfo CWE-78
  • CVE Modified by [email protected]

    Feb. 27, 2023

    Action Type Old Value New Value
    Added Reference http://packetstormsecurity.com/files/171123/pfBlockerNG-2.1.4_26-Remote-Code-Execution.html [No Types Assigned]
  • Modified Analysis by [email protected]

    Oct. 28, 2022

    Action Type Old Value New Value
    Changed Reference Type http://packetstormsecurity.com/files/168743/pfSense-pfBlockerNG-2.1.4_26-Shell-Upload.html No Types Assigned http://packetstormsecurity.com/files/168743/pfSense-pfBlockerNG-2.1.4_26-Shell-Upload.html Exploit, Third Party Advisory, VDB Entry
  • CVE Modified by [email protected]

    Oct. 17, 2022

    Action Type Old Value New Value
    Added Reference http://packetstormsecurity.com/files/168743/pfSense-pfBlockerNG-2.1.4_26-Shell-Upload.html [No Types Assigned]
  • Initial Analysis by [email protected]

    Sep. 09, 2022

    Action Type Old Value New Value
    Added CVSS V3.1 NIST AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    Changed Reference Type https://docs.netgate.com/pfsense/en/latest/packages/pfblocker.html No Types Assigned https://docs.netgate.com/pfsense/en/latest/packages/pfblocker.html Release Notes, Vendor Advisory
    Changed Reference Type https://www.ihteam.net/advisory/pfblockerng-unauth-rce-vulnerability/ No Types Assigned https://www.ihteam.net/advisory/pfblockerng-unauth-rce-vulnerability/ Exploit, Technical Description, Third Party Advisory
    Added CWE NIST NVD-CWE-noinfo
    Added CPE Configuration OR *cpe:2.3:a:netgate:pfblockerng:*:*:*:*:*:pfsense:*:* versions up to (including) 2.1.4_26
EPSS is a daily estimate of the probability of exploitation activity being observed over the next 30 days. Following chart shows the EPSS score history of the vulnerability.
CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorizes the common flaws or weaknesses that can lead to vulnerabilities. CVE-2022-31814 is associated with the following CWEs:

Common Attack Pattern Enumeration and Classification (CAPEC)

Exploit Prediction

EPSS is a daily estimate of the probability of exploitation activity being observed over the next 30 days.

96.91 }} -0.14%

score

0.99759

percentile

CVSS31 - Vulnerability Scoring System
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability