Every CVE Search/ Get API key

CVE-2022-31814

pfSense pfBlockerNG through 2.1.4_26 allows remote attackers to execute arbitrary OS commands as...

9.8 CriticalPublic exploit

pfSense pfBlockerNG through 2.1.4_26 allows remote attackers to execute arbitrary OS commands as root via shell metacharacters in the HTTP Host header. NOTE: 3.x is unaffected.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

91.9%Up 90.8 points since Sep 6, 2022
90%50%10%1%

What each source reports

NVD Score used 9.8

pfSense pfBlockerNG through 2.1.4_26 allows remote attackers to execute arbitrary OS commands as root via shell metacharacters in the HTTP Host header. NOTE: 3.x is unaffected.

Record
CVE-2022-31814
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-78
Updated
2026-11-02
CVE List 9.8

pfSense pfBlockerNG through 2.1.4_26 allows remote attackers to execute arbitrary OS commands as root via shell metacharacters in the HTTP Host header. NOTE: 3.x is unaffected.

Record
CVE-2022-31814
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-78
Updated
2026-11-02
EUVDEUVD-2022-53199 9.8

pfSense pfBlockerNG through 2.1.4_26 allows remote attackers to execute arbitrary OS commands as root via shell metacharacters in the HTTP Host header. NOTE: 3.x is unaffected.

Record
EUVD-2022-53199
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-03
GitHub AdvisoriesGHSA-hr8v-98c3-7p3x 9.8

pfSense pfBlockerNG through 2.1.4_26 allows remote attackers to execute arbitrary OS commands as...

pfSense pfBlockerNG through 2.1.4_26 allows remote attackers to execute arbitrary OS commands as root via shell metacharacters in the HTTP Host header. NOTE: 3.x is unaffected.

Record
GHSA-hr8v-98c3-7p3x
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-78
Updated
2026-11-02

Affected products

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBpfBlockerNG 2.1.4_26 - Remote Code Execution (RCE)2023-02-20
MetasploitpfSense plugin pfBlockerNG unauthenticated RCE as root2022-09-05
NucleipfSense pfBlockerNG <=2.1..4_26 - OS Command Injection
PoC in GitHubArunHAtter/CVE-2022-318142024-08-12
PoC in GitHubChocapikk/CVE-2022-318142023-03-26
PoC in GitHubEvergreenCartoons/SenselessViolence2022-09-18
PoC in GitHubLaburity/CVE-2022-318142024-07-23
PoC in GitHubMadliife0/CVE-2022-318142023-02-22
PoC in GitHubTheUnknownSoul/CVE-2022-318142023-03-01
PoC in GitHubdkstar11q/CVE-2022-318142023-03-26
PoC in GitHubdrcayber/RCE2023-03-05
PoC in GitHubsh4den/CVE-2022-318142025-01-16

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, Metasploit, Nuclei, NVD, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2022-31814 is a critical vulnerability (CVSS 9.8) in Netgate Pfblockerng, published September 5, 2022. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 91.9%, the 99th percentile. No source names a fixed version.

References

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open