CVE Catalog
CVE-2023-39008
CriticalCVSS 9.8Exploitation Probability (EPSS)
High risk2.56%
83th percentile - higher than 83% of all known CVEs
Summary
A command injection vulnerability in the component /api/cron/settings/setJob/ of OPNsense Community Edition before 23.7 and Business Edition before 23.4.2 allows attackers to execute arbitrary system commands.
Risk Assessment
This vulnerability poses a serious risk to system security, allowing attackers to gain full control over the operating system.
Recommendation
It is recommended to update OPNsense to the latest version to mitigate this vulnerability.
Original NVD description (English source)
A command injection vulnerability in the component /api/cron/settings/setJob/ of OPNsense Community Edition before 23.7 and Business Edition before 23.4.2 allows attackers to execute arbitrary system commands.