Unscored severity · published Apr 10, 2015
CVE-2015-2295
Cross-site request forgery (CSRF) vulnerability in system_firmware_restorefullbackup.php in the WebGUI in pfSense before 2.2.1 allows remote attackers to hijack the authentication…
–
CVSS
65.7%
EPSS
No
On KEV
Description
Cross-site request forgery (CSRF) vulnerability in system_firmware_restorefullbackup.php in the WebGUI in pfSense before 2.2.1 allows remote attackers to hijack the authentication of administrators for requests that delete arbitrary files via the deletefile parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)65.7% · higher than 99% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PF
Pfsense · Netgate
through 2.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-2295
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-2295
Exploit
http://packetstormsecurity.com/files/131022/pfSense-2.2-Cross-Site-Request-Forgery-Cross-Site-Scripting.html
www.securityfocus.com
http://www.securityfocus.com/archive/1/534987/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/73344
www.exploit-db.com
https://www.exploit-db.com/exploits/36506/
Exploit
https://www.htbridge.com/advisory/HTB23251
www.pfsense.org
https://www.pfsense.org/security/advisories/pfSense-SA-15_04.webgui.asc
More from Pfsense
9.8
CVE-2019-16915
An issue was discovered in pfSense through 2.4.4-p3
9.8
CVE-2019-12585
Apcupsd 0.3.91_5, as used in pfSense through 2.4.4-RELEASE-p3 and other products, has an Arbitrary Command Execution issue in apcupsd_status.php
9.6
CVE-2020-21487
Cross Site Scripting vulnerability found in Netgate pfSense 2.4.4 and ACME package v.0.6.3 allows attackers to execute arbitrary code via the RootFolder field of…
8.8
CVE-2025-12490
Netgate pfSense CE Suricata Path Traversal Remote Code Execution Vulnerability
8.8
CVE-2023-48123
An issue in Netgate pfSense Plus v.23.05.1 and before and pfSense CE v.2.7.0 allows a remote attacker to execute arbitrary code via a crafted request to the packet_capture.php…