CVE-2025-53392 in Netgate pfSense CE
Сводка (Английский)
In Netgate pfSense CE 2.8.0, the "WebCfg - Diagnostics: Command" privilege allows reading arbitrary files via diag_command.php dlPath directory traversal. NOTE: the Supplier's perspective is that this is intended behavior for this privilege level, and that system administrators are informed through both the product documentation and UI.
Ответственный
MITRE
Резервировать
28.06.2025
Раскрытие
29.06.2025
Записи
VulDB provides additional information and datapoints for this CVE:
| ИД | Уязвимость | CWE | Экс | Кон | CVE |
|---|---|---|---|---|---|
| 314384 | Netgate pfSense CE diag_command.php раскрытие информации | 36 | Не определено | Не определено | CVE-2025-53392 |