Detections
Analytics
pfSense < 2.1.4 Multiple Vulnerabilities (SA-14_08 - SA-14_12)
medium Nessus Plugin ID 106490
Language:
Synopsis
The remote firewall host is affected by multiple vulnerabilities.Description
According to its self-reported version number, the remote pfSense install is prior to 2.1.4. It is, therefore, affected by multiple vulnerabilities.Solution
Upgrade to pfSense version 2.1.4 or later.See Also
https://www.pfsense.org/security/advisories/pfSense-SA-14_08.webgui.asc
https://www.pfsense.org/security/advisories/pfSense-SA-14_12.webgui.asc
https://www.pfsense.org/security/advisories/pfSense-SA-14_11.webgui.asc
https://www.pfsense.org/security/advisories/pfSense-SA-14_10.webgui.asc
https://www.pfsense.org/security/advisories/pfSense-SA-14_09.webgui.asc
Plugin Details
Severity: Medium
ID: 106490
File Name: pfsense_SA-14_12.nasl
Version: 1.5
Type: remote
Family: CGI abuses
Published: 1/31/2018
Updated: 4/5/2019
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 6.6
CVSS v2
Risk Factor: Medium
Base Score: 6.8
Temporal Score: 5.3
Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P
CVSS Score Source: CVE-2014-4691
CVSS v3
Risk Factor: Medium
Base Score: 6.5
Temporal Score: 5.9
Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L
Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C
Vulnerability Information
CPE: cpe:/a:pfsense:pfsense, cpe:/a:bsdperimeter:pfsense
Required KB Items: Host/pfSense
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 6/6/2014
Vulnerability Publication Date: 6/6/2014
Reference Information
CVE: CVE-2014-4687, CVE-2014-4688, CVE-2014-4689, CVE-2014-4690, CVE-2014-4691, CVE-2014-4692