CVE-2019-16701

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

pfSense through 2.3.4 through 2.4.4-p3 allows Remote Code Injection via a methodCall XML document with a pfsense.exec_php call containing shell metacharacters in a parameter value.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-78

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://packetstormsecurity.com/files/154587/pfSense-2.3.4-2.4.4-p3-Remote-Code-Injection.htmlExploit, Third Party Advisory, VDB Entry
https://github.com/pfsense/pfsense/commits/masterThird Party Advisory
https://hackernews.blog/pfsense-2-3-4-2-4-4-p3-remote-code-injection/#moreExploit, Third Party Advisory
http://packetstormsecurity.com/files/154587/pfSense-2.3.4-2.4.4-p3-Remote-Code-Injection.htmlExploit, Third Party Advisory, VDB Entry
https://github.com/pfsense/pfsense/commits/masterThird Party Advisory
https://hackernews.blog/pfsense-2-3-4-2-4-4-p3-remote-code-injection/#moreExploit, Third Party Advisory

Timeline

Published: Sep 25, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-167029.8Integard Pro 2.2.0.9026 allows remote attackers to execute arbitrary code via a buffer overflow involving a long NoJs parameter to the /Logi CVE-2019-167036.1admin/infolist_add.php in PHPMyWind 5.6 has stored XSS.CVE-2019-167044.8admin/infoclass_update.php in PHPMyWind 5.6 has stored XSS.CVE-2019-167059.1Ming (aka libming) 0.4.8 has an out of bounds read vulnerability in the function OpCode() in the decompile.c file in libutil.a.CVE-2019-167068.8kkcms v1.3 has a CSRF vulnerablity that can add an user account via admin/cms_user_add.php.CVE-2019-167076.5Hunspell 1.7.0 has an invalid read operation in SuggestMgr::leftcommonsubstring in suggestmgr.cxx.CVE-2019-167086.5ImageMagick 7.0.8-35 has a memory leak in magick/xwindow.c, related to XCreateImage.CVE-2019-167096.5ImageMagick 7.0.8-35 has a memory leak in coders/dps.c, as demonstrated by XCreateImage.CVE-2019-16716.1A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) could allow an unauthenticated, remote atta CVE-2019-167106.5ImageMagick 7.0.8-35 has a memory leak in coders/dot.c, as demonstrated by AcquireMagickMemory in MagickCore/memory.c.CVE-2019-167116.5ImageMagick 7.0.8-40 has a memory leak in Huffman2DEncodeImage in coders/ps2.c.CVE-2019-167126.5ImageMagick 7.0.8-43 has a memory leak in Huffman2DEncodeImage in coders/ps3.c, as demonstrated by WritePS3Image.