What is CVE-2018-20799?

CVE-2018-20799 is a high-severity vulnerability in Netgate Pfsense. CVSS score: 7.5/10. Published 2019-03-01.

How severe is CVE-2018-20799?

High severity. CVSS v3 base score is 7.5 out of 10.

Vulnerability in Netgate Pfsense

CVE-2018-20799

In pfSense 2.4.4_1, blocking of source IP addresses on the basis of failed HTTPS authentication is inconsistent with blocking of source IP addresses on the basis of failed SSH authentication (the behavior does not match the sshguard documentation), which might make it easier for attackers to bypass intended access restrictions.

Published 2019-03-01 · last modified 2026-06-17.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N.

EPSS exploit prediction

EPSS: 0.016 (75.6th percentile), scored 2026-10-29.

Low probability of exploitation in the next 30 days, but still tracked. 76th percentile — 75.6% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.016 · newest: 0.016 · change: 0.000

Affected products

Netgate Pfsense — versions 2.4.4

References

redmine.pfsense.org/issues/9223 (Exploit, Patch, Issue Tracking, Vendor Advisory)

Frequently asked questions

What is CVE-2018-20799?: CVE-2018-20799 is a high-severity vulnerability in Netgate Pfsense. CVSS score: 7.5/10. Published 2019-03-01.
How severe is CVE-2018-20799?: High severity. CVSS v3 base score is 7.5 out of 10.