description: Improper input validation vulnerability in pfSense CE and pfSense Plus (pfSense CE software versions prior to 2.6.0 and pfSense Plus software versions prior to 22.01) allows a remote attacker with the privilege to change OpenVPN client or server settings to execute an arbitrary command.
problem types: Improper Input Validation
affected:
{
product: pfSense CE and pfSense Plus
vendor: pfSense
versions:
status: affected, version: pfSense CE software versions prior to 2.6.0 and pfSense Plus software versions prior to 22.01
}