What’s Vulnerable › Vulnerabilities

CVE-2019-16667

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 54.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2019-09-26 · updated 2026-06-17
• Weakness: CWE-352

Description

diag_command.php in pfSense 2.4.4-p3 allows CSRF via the txtCommand or txtRecallBuffer field, as demonstrated by executing OS commands. This occurs because csrf_callback() produces a "CSRF token expired" error and a Try Again button when a CSRF token is missing.

Affected products

• Netgate pfSense: 2.4.4-p3

References

• http://packetstormsecurity.com/files/158614/pfSense-2.4.4-p3-Cross-Site-Request-Forgery.html
• https://pastebin.com/TEJdu9LN
• http://packetstormsecurity.com/files/158614/pfSense-2.4.4-p3-Cross-Site-Request-Forgery.html
• https://pastebin.com/TEJdu9LN

Get alerted when CVE-2019-16667 or the next vulnerability affects your stack