CVE-2022-31814 PoC — pfSense 操作系统命令注入漏洞

Source

https://github.com/TheUnknownSoul/CVE-2022-31814

Associated Vulnerability

Title:pfSense 操作系统命令注入漏洞 (CVE-2022-31814)
Description:pfSense是一套基于FreeBSD Linux的网络防火墙。 pfSense pfBlockerNG 2.1.4_26 版本之前存在安全漏洞。远程攻击者通过 HTTP 主机标头中的 shell 元字符以 root 身份可以执行任意操作系统命令。

Readme

# CVE-2022-31814

```text


Reworked and optimized exploit script of pfBlockerNG 2.1.4_26 vulnerability

Exploit Title: pfBlockerNG 2.1.4_26 - Remote Code Execution (RCE)
Shodan Results:
https://www.shodan.io/search?query=http.title%3A%22pfSense+-+Login%22+%22Server%3A+nginx%22+%22Set-Cookie%3A+PHPSESSID%3D%22
Date: 5th of September 2022
Exploit Author: IHTeam
Vendor Homepage: https://docs.netgate.com/pfsense/en/latest/packages/pfblocker.html
Software Link: https://github.com/pfsense/FreeBSD-ports/pull/1169
Version: 2.1.4_26
Tested on: pfSense 2.6.0
CVE : CVE-2022-31814
Original Advisory: https://www.ihteam.net/advisory/pfblockerng-unauth-rce-vulnerability/
```

File Snapshot


 [4.0K]  /data/pocs/125b5e9e11f6cec62a7d2881abb29c510cebca14
├── [2.7K]  exploit.py
├── [1.0K]  LICENSE.md
└── [ 669]  README.md

0 directories, 3 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!