CVE-2018-16232

Published: Oct 17, 2018Modified: Nov 21, 2024

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

An authenticated command injection vulnerability exists in IPFire Firewall before 2.21 Core Update 124 in backup.cgi. This allows an authenticated user with privileges for the affected page to execute arbitrary commands.

Affected (56)

Products: Ipfire: Ipfire

Ipfire

1 product

Ipfire

Configuration A

56 vulnerable

Vulnerable Software	Affected Versions
Ipfire Ipfire	Version 1.49
Ipfire Ipfire	Version 2.11 core_update53
Ipfire Ipfire	Version 2.11 core_update54
Ipfire Ipfire	Version 2.11 core_update59
Ipfire Ipfire	Version 2.11 core_update60
Ipfire Ipfire	Version 2.11 core_update62
Ipfire Ipfire	Version 2.11 core_update64
Ipfire Ipfire	Version 2.13 core_update66
Ipfire Ipfire	Version 2.13 core_update67
Ipfire Ipfire	Version 2.13 core_update71
Ipfire Ipfire	Version 2.13 core_update72
Ipfire Ipfire	Version 2.13 core_update73
Ipfire Ipfire	Version 2.13 core_update74
Ipfire Ipfire	Version 2.13 core_update75
Ipfire Ipfire	Version 2.13 core_update76
Ipfire Ipfire	Version 2.13 rc_1
Ipfire Ipfire	Version 2.13 rc_2
Ipfire Ipfire	Version 2.15 76_rc1
Ipfire Ipfire	Version 2.15 77_rc1
Ipfire Ipfire	Version 2.15 77_rc2
Ipfire Ipfire	Version 2.15 core_update79
Ipfire Ipfire	Version 2.15 core_update81
Ipfire Ipfire	Version 2.15 core_update82
Ipfire Ipfire	Version 2.15 core_update83
Ipfire Ipfire	Version 2.15 core_update84
Ipfire Ipfire	Version 2.15 core_update85
Ipfire Ipfire	Version 2.17 86_beta1
Ipfire Ipfire	Version 2.17 87_rc1
Ipfire Ipfire	Version 2.17 core_update88
Ipfire Ipfire	Version 2.17 core_update89
Ipfire Ipfire	Version 2.17 core_update91
Ipfire Ipfire	Version 2.17 core_update93
Ipfire Ipfire	Version 2.17 core_update95
Ipfire Ipfire	Version 2.17 core_update97
Ipfire Ipfire	Version 2.17 core_update98
Ipfire Ipfire	Version 2.17 core_update99
Ipfire Ipfire	Version 2.19 core_update100
Ipfire Ipfire	Version 2.19 core_update101
Ipfire Ipfire	Version 2.19 core_update102
Ipfire Ipfire	Version 2.19 core_update105
Ipfire Ipfire	Version 2.19 core_update106
Ipfire Ipfire	Version 2.19 core_update107
Ipfire Ipfire	Version 2.19 core_update108
Ipfire Ipfire	Version 2.19 core_update111
Ipfire Ipfire	Version 2.19 core_update112
Ipfire Ipfire	Version 2.19 core_update113
Ipfire Ipfire	Version 2.19 core_update114
Ipfire Ipfire	Version 2.19 core_update116
Ipfire Ipfire	Version 2.19 core_update117
Ipfire Ipfire	Version 2.19 core_update118
Ipfire Ipfire	Version 2.19 core_update119
Ipfire Ipfire	Version 2.19 core_update120
Ipfire Ipfire	Version 2.1
Ipfire Ipfire	Version 2.1 core_update16
Ipfire Ipfire	Version 2.21 core_update122
Ipfire Ipfire	Version 2.21 core_update123