Back to feed
EUVD-2023-33505 · Published Nov 9, 2023
An issue discovered in Pfsense CE version 2.6.0 allows attackers to change the password of any user without verification.
Technologies
Pfsense Pfsense
Weaknesses
CWE-287
CVSS scores
- v3.17.2
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access
References
Potentially impacted assets
See if this affects your attack surface
