漏洞类别：Security Policy
漏洞等级： 
漏洞信息
pfSense is an open-source firewall/router which based on FreeBSD. pfSense can be deployed as a perimeter firewall, router, wireless access point, DHCP server, DNS server and VPN endpoint.
Support for pfSense version 2.0.x - 2.1.x has ended.
No further bug fixes, enhancements, security updates or technical support is available for this version.
QID Detection Logic (unauthenticated):
QID posted based on operating system and version of SSH banner.
QID checks for SNMP sysDescr banner as well to flag version 2.1.x if SNMP (default port 161) is enabled on the target.
漏洞危害
The system is at high risk of being exposed to security vulnerabilities. Since the vendor no longer provides updates, obsolete software is more vulnerable to viruses and other attacks.
解决方案
Upgrade to the latest version of pfSense. Please refer to pfSense website.
0daybank
文章评论