CVE-2023-29973

MediumCVSS 4.9/10Last modified Jun 17, 2026

Description

Pfsense CE version 2.6.0 is vulnerable to No rate limit which can lead to an attacker creating multiple malicious users in firewall.

Metrics

CVSS 3.1 4.9/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-770

Affected software

No affected versions have been published.

Timeline

Published
Oct 25, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-299749.8An issue discovered in Pfsense CE version 2.6.0 allows attackers to compromise user accounts via weak password requirements.CVE-2023-299757.2An issue discovered in Pfsense CE version 2.6.0 allows attackers to change the password of any user without verification.CVE-2023-29986.1Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.14.CVE-2023-299835.4Cross Site Scripting vulnerability found in Maximilian Vogt cmaps v.8.0 allows a remote attacker to execute arbitrary code via the auditlog CVE-2023-299847.5Null pointer dereference vulnerability exists in multiple vendors MFPs and printers which implement Debut web server 1.2 or 1.3. Processing CVE-2023-299859.8Sourcecodester Student Study Center Desk Management System v1.0 admin\reports\index.php#date_from has a SQL Injection vulnerability.CVE-2023-299865.3spring-boot-actuator-logview 0.2.13 allows Directory Traversal to sibling directories via LogViewEndpoint.view.CVE-2023-29996.1Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.14.CVE-2023-299947.5In NanoMQ v0.15.0-0, Heap overflow occurs in read_byte function of mqtt_code.c.CVE-2023-299957.5In NanoMQ v0.15.0-0, a Heap overflow occurs in copyn_utf8_str function of mqtt_parser.cCVE-2023-299967.5In NanoMQ v0.15.0-0, segment fault with Null Pointer Dereference occurs in the process of decoding subinfo_decode and unsubinfo_decode.CVE-2023-299985.4A Cross-site scripting (XSS) vulnerability in the content editor in Gis3W g3w-suite 3.5 allows remote authenticated users to inject arbitrar
CVE-2023-29973: Medium severity, CVSS 4.9 | Vulnix