High severity · published Jan 3, 2018
CVE-2017-1000479
pfSense versions 2.4.1 and lower are vulnerable to clickjacking attacks in the CSRF error page resulting in privileged execution of arbitrary code, because the error detection…
8.8
CVSS
31.7%
EPSS
No
On KEV
Description
pfSense versions 2.4.1 and lower are vulnerable to clickjacking attacks in the CSRF error page resulting in privileged execution of arbitrary code, because the error detection occurs before an X-Frame-Options header is set. This is fixed in 2.4.2-RELEASE. OPNsense, a 2015 fork of pfSense, was not vulnerable since version 16.1.16 released on June 06, 2016. The unprotected web form was removed from the code during an internal security audit under "possibly insecure" suspicions.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)31.7% · higher than 98% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OP
Opnsense · Opnsense Project
before 16.1.16 · source: NVD
PF
Pfsense · Netgate
through 2.4.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2017-1000479
CVE.org
https://www.cve.org/CVERecord?id=CVE-2017-1000479
Exploit
http://www.openwall.com/lists/oss-security/2017/11/22/7
Issue Tracking
https://doc.pfsense.org/index.php/2.4.2_New_Features_and_Changes
Patch
https://github.com/opnsense/core/commit/d218b225
Patch
https://github.com/pfsense/pfsense/commit/386d89b07
Third Party Advisory
https://www.netgate.com/blog/pfsense-2-4-2-release-p1-and-2-3-5-release-p1-now-available.html
Exploit
https://www.securify.nl/en/advisory/SFY20171101/clickjacking-vulnerability-in-csrf-error-page-pfsense.html
More from Pfsense
9.8
CVE-2019-16915
An issue was discovered in pfSense through 2.4.4-p3
9.8
CVE-2019-12585
Apcupsd 0.3.91_5, as used in pfSense through 2.4.4-RELEASE-p3 and other products, has an Arbitrary Command Execution issue in apcupsd_status.php
9.6
CVE-2020-21487
Cross Site Scripting vulnerability found in Netgate pfSense 2.4.4 and ACME package v.0.6.3 allows attackers to execute arbitrary code via the RootFolder field of…
8.8
CVE-2025-12490
Netgate pfSense CE Suricata Path Traversal Remote Code Execution Vulnerability
8.8
CVE-2023-48123
An issue in Netgate pfSense Plus v.23.05.1 and before and pfSense CE v.2.7.0 allows a remote attacker to execute arbitrary code via a crafted request to the packet_capture.php…