CVE-2018-16232 An authenticated command injection vulnerability exists in IPFire Firewall before 2.21 Core Update 124 in backup.cgi. This allows an authenticated user with privileges for the affected page to execute...
HighCVSS 8.8
EPSS 7.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An authenticated command injection vulnerability exists in IPFire Firewall before 2.21 Core Update 124 in backup.cgi. This allows an authenticated user with privileges for the affected page to execute arbitrary commands.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ipfire | = 1.49 | No fix listed |
| ipfire | = 2.1 | No fix listed |
| ipfire | = 2.1-core_update16 | No fix listed |
| ipfire | = 2.11-core_update53 | No fix listed |
| ipfire | = 2.11-core_update54 | No fix listed |
| ipfire | = 2.11-core_update59 | No fix listed |
| ipfire | = 2.11-core_update60 | No fix listed |
| ipfire | = 2.11-core_update62 | No fix listed |
| ipfire | = 2.11-core_update64 | No fix listed |
| ipfire | = 2.13-core_update66 | No fix listed |
| ipfire | = 2.13-core_update67 | No fix listed |
| ipfire | = 2.13-core_update71 | No fix listed |
| ipfire | = 2.13-core_update72 | No fix listed |
| ipfire | = 2.13-core_update73 | No fix listed |
| ipfire | = 2.13-core_update74 | No fix listed |
| ipfire | = 2.13-core_update75 | No fix listed |
| ipfire | = 2.13-core_update76 | No fix listed |
| ipfire | = 2.13-rc_1 | No fix listed |
| ipfire | = 2.13-rc_2 | No fix listed |
| ipfire | = 2.15-76_rc1 | No fix listed |
| ipfire | = 2.15-77_rc1 | No fix listed |
| ipfire | = 2.15-77_rc2 | No fix listed |
| ipfire | = 2.15-core_update79 | No fix listed |
| ipfire | = 2.15-core_update81 | No fix listed |
| ipfire | = 2.15-core_update82 | No fix listed |
Show 31 more
| Product | Affected versions | Fixed in |
|---|---|---|
| ipfire | = 2.15-core_update83 | No fix listed |
| ipfire | = 2.15-core_update84 | No fix listed |
| ipfire | = 2.15-core_update85 | No fix listed |
| ipfire | = 2.17-86_beta1 | No fix listed |
| ipfire | = 2.17-87_rc1 | No fix listed |
| ipfire | = 2.17-core_update88 | No fix listed |
| ipfire | = 2.17-core_update89 | No fix listed |
| ipfire | = 2.17-core_update91 | No fix listed |
| ipfire | = 2.17-core_update93 | No fix listed |
| ipfire | = 2.17-core_update95 | No fix listed |
| ipfire | = 2.17-core_update97 | No fix listed |
| ipfire | = 2.17-core_update98 | No fix listed |
| ipfire | = 2.17-core_update99 | No fix listed |
| ipfire | = 2.19-core_update100 | No fix listed |
| ipfire | = 2.19-core_update101 | No fix listed |
| ipfire | = 2.19-core_update102 | No fix listed |
| ipfire | = 2.19-core_update105 | No fix listed |
| ipfire | = 2.19-core_update106 | No fix listed |
| ipfire | = 2.19-core_update107 | No fix listed |
| ipfire | = 2.19-core_update108 | No fix listed |
| ipfire | = 2.19-core_update111 | No fix listed |
| ipfire | = 2.19-core_update112 | No fix listed |
| ipfire | = 2.19-core_update113 | No fix listed |
| ipfire | = 2.19-core_update114 | No fix listed |
| ipfire | = 2.19-core_update116 | No fix listed |
| ipfire | = 2.19-core_update117 | No fix listed |
| ipfire | = 2.19-core_update118 | No fix listed |
| ipfire | = 2.19-core_update119 | No fix listed |
| ipfire | = 2.19-core_update120 | No fix listed |
| ipfire | = 2.21-core_update122 | No fix listed |
| ipfire | = 2.21-core_update123 | No fix listed |
References
- doddsecurity.com exploit vendor-advisory
- www.ipfire.org patch vendor-advisory