What is CVE-2018-20799?

CVE-2018-20799 is a high-severity vulnerability in Netgate Pfsense. CVSS score: 7.5/10. Published 2019-03-01.

How severe is CVE-2018-20799?

High severity. CVSS v3 base score is 7.5 out of 10.

Vulnerability in Netgate Pfsense

CVE-2018-20799

In pfSense 2.4.4_1, blocking of source IP addresses on the basis of failed HTTPS authentication is inconsistent with blocking of source IP addresses on the basis of failed SSH authentication (the behavior does not match the sshguard docume…

EPSS: 0.016 (73.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N.

Affected products

Netgate Pfsense — versions 2.4.4
N/a — versions n/a

References

cve@mitre.org (Exploit, Patch, x_refsource_MISC, Issue Tracking, Vendor Advisory)

Frequently asked questions

What is CVE-2018-20799?: CVE-2018-20799 is a high-severity vulnerability in Netgate Pfsense. CVSS score: 7.5/10. Published 2019-03-01.
How severe is CVE-2018-20799?: High severity. CVSS v3 base score is 7.5 out of 10.