What’s Vulnerable › Vulnerabilities
CVE-2018-20799
- Severity: high (CVSS 7.5 v3.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.6% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2019-03-01 · updated 2026-06-17
Description
In pfSense 2.4.4_1, blocking of source IP addresses on the basis of failed HTTPS authentication is inconsistent with blocking of source IP addresses on the basis of failed SSH authentication (the behavior does not match the sshguard documentation), which might make it easier for attackers to bypass intended access restrictions.
Affected products
- Netgate pfSense: 2.4.4-p1
References
Get alerted when CVE-2018-20799 or the next vulnerability affects your stack