Read the docs
TI-2018-11622 Aliases CVE-2018-16232GHSA-pprx-2p4p-r72p

An authenticated command injection vulnerability exists in IPFire Firewall before 2.21…

Priority MEDIUM 49CWE-78Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-78.

Summary

An authenticated command injection vulnerability exists in IPFire Firewall before 2.21 Core Update 124 in backup.cgi. This allows an authenticated user with privileges for the affected page to execute arbitrary commands.

Why it matters now

EPSS 0.07786 94th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 56

CPEVersionsRoleVendor
cpe:2.3:a:ipfire:ipfire:1.49:*:*:*:*:*:*:*1.49VulnerableIPFire.org
cpe:2.3:a:ipfire:ipfire:2.1:*:*:*:*:*:*:*2.1VulnerableIPFire.org
cpe:2.3:a:ipfire:ipfire:2.1:core_update16:*:*:*:*:*:*2.1 core_update16VulnerableIPFire.org
cpe:2.3:a:ipfire:ipfire:2.11:core_update53:*:*:*:*:*:*2.11 core_update53VulnerableIPFire.org
cpe:2.3:a:ipfire:ipfire:2.11:core_update54:*:*:*:*:*:*2.11 core_update54VulnerableIPFire.org
cpe:2.3:a:ipfire:ipfire:2.11:core_update59:*:*:*:*:*:*2.11 core_update59VulnerableIPFire.org
cpe:2.3:a:ipfire:ipfire:2.11:core_update60:*:*:*:*:*:*2.11 core_update60VulnerableIPFire.org
cpe:2.3:a:ipfire:ipfire:2.11:core_update62:*:*:*:*:*:*2.11 core_update62VulnerableIPFire.org
cpe:2.3:a:ipfire:ipfire:2.11:core_update64:*:*:*:*:*:*2.11 core_update64VulnerableIPFire.org
cpe:2.3:a:ipfire:ipfire:2.13:core_update66:*:*:*:*:*:*2.13 core_update66VulnerableIPFire.org
  • cpe:2.3:a:ipfire:ipfire:1.49:*:*:*:*:*:*:* Versions 1.49 Vulnerable ·IPFire.org
  • cpe:2.3:a:ipfire:ipfire:2.1:*:*:*:*:*:*:* Versions 2.1 Vulnerable ·IPFire.org
  • cpe:2.3:a:ipfire:ipfire:2.1:core_update16:*:*:*:*:*:* Versions 2.1 core_update16 Vulnerable ·IPFire.org
  • cpe:2.3:a:ipfire:ipfire:2.11:core_update53:*:*:*:*:*:* Versions 2.11 core_update53 Vulnerable ·IPFire.org
  • cpe:2.3:a:ipfire:ipfire:2.11:core_update54:*:*:*:*:*:* Versions 2.11 core_update54 Vulnerable ·IPFire.org
  • cpe:2.3:a:ipfire:ipfire:2.11:core_update59:*:*:*:*:*:* Versions 2.11 core_update59 Vulnerable ·IPFire.org
  • cpe:2.3:a:ipfire:ipfire:2.11:core_update60:*:*:*:*:*:* Versions 2.11 core_update60 Vulnerable ·IPFire.org
  • cpe:2.3:a:ipfire:ipfire:2.11:core_update62:*:*:*:*:*:* Versions 2.11 core_update62 Vulnerable ·IPFire.org
  • cpe:2.3:a:ipfire:ipfire:2.11:core_update64:*:*:*:*:*:* Versions 2.11 core_update64 Vulnerable ·IPFire.org
  • cpe:2.3:a:ipfire:ipfire:2.13:core_update66:*:*:*:*:*:* Versions 2.13 core_update66 Vulnerable ·IPFire.org
Show 46 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:ipfire:ipfire:2.13:core_update67:*:*:*:*:*:*2.13 core_update67VulnerableIPFire.org
cpe:2.3:a:ipfire:ipfire:2.13:core_update71:*:*:*:*:*:*2.13 core_update71VulnerableIPFire.org
cpe:2.3:a:ipfire:ipfire:2.13:core_update72:*:*:*:*:*:*2.13 core_update72VulnerableIPFire.org
cpe:2.3:a:ipfire:ipfire:2.13:core_update73:*:*:*:*:*:*2.13 core_update73VulnerableIPFire.org
cpe:2.3:a:ipfire:ipfire:2.13:core_update74:*:*:*:*:*:*2.13 core_update74VulnerableIPFire.org
cpe:2.3:a:ipfire:ipfire:2.13:core_update75:*:*:*:*:*:*2.13 core_update75VulnerableIPFire.org
cpe:2.3:a:ipfire:ipfire:2.13:core_update76:*:*:*:*:*:*2.13 core_update76VulnerableIPFire.org
cpe:2.3:a:ipfire:ipfire:2.13:rc_1:*:*:*:*:*:*2.13 rc_1VulnerableIPFire.org
cpe:2.3:a:ipfire:ipfire:2.13:rc_2:*:*:*:*:*:*2.13 rc_2VulnerableIPFire.org
cpe:2.3:a:ipfire:ipfire:2.15:76_rc1:*:*:*:*:*:*2.15 76_rc1VulnerableIPFire.org
cpe:2.3:a:ipfire:ipfire:2.15:77_rc1:*:*:*:*:*:*2.15 77_rc1VulnerableIPFire.org
cpe:2.3:a:ipfire:ipfire:2.15:77_rc2:*:*:*:*:*:*2.15 77_rc2VulnerableIPFire.org
cpe:2.3:a:ipfire:ipfire:2.15:core_update79:*:*:*:*:*:*2.15 core_update79VulnerableIPFire.org
cpe:2.3:a:ipfire:ipfire:2.15:core_update81:*:*:*:*:*:*2.15 core_update81VulnerableIPFire.org
cpe:2.3:a:ipfire:ipfire:2.15:core_update82:*:*:*:*:*:*2.15 core_update82VulnerableIPFire.org
cpe:2.3:a:ipfire:ipfire:2.15:core_update83:*:*:*:*:*:*2.15 core_update83VulnerableIPFire.org
cpe:2.3:a:ipfire:ipfire:2.15:core_update84:*:*:*:*:*:*2.15 core_update84VulnerableIPFire.org
cpe:2.3:a:ipfire:ipfire:2.15:core_update85:*:*:*:*:*:*2.15 core_update85VulnerableIPFire.org
cpe:2.3:a:ipfire:ipfire:2.17:86_beta1:*:*:*:*:*:*2.17 86_beta1VulnerableIPFire.org
cpe:2.3:a:ipfire:ipfire:2.17:87_rc1:*:*:*:*:*:*2.17 87_rc1VulnerableIPFire.org
cpe:2.3:a:ipfire:ipfire:2.17:core_update88:*:*:*:*:*:*2.17 core_update88VulnerableIPFire.org
cpe:2.3:a:ipfire:ipfire:2.17:core_update89:*:*:*:*:*:*2.17 core_update89VulnerableIPFire.org
cpe:2.3:a:ipfire:ipfire:2.17:core_update91:*:*:*:*:*:*2.17 core_update91VulnerableIPFire.org
cpe:2.3:a:ipfire:ipfire:2.17:core_update93:*:*:*:*:*:*2.17 core_update93VulnerableIPFire.org
cpe:2.3:a:ipfire:ipfire:2.17:core_update95:*:*:*:*:*:*2.17 core_update95VulnerableIPFire.org
cpe:2.3:a:ipfire:ipfire:2.17:core_update97:*:*:*:*:*:*2.17 core_update97VulnerableIPFire.org
cpe:2.3:a:ipfire:ipfire:2.17:core_update98:*:*:*:*:*:*2.17 core_update98VulnerableIPFire.org
cpe:2.3:a:ipfire:ipfire:2.17:core_update99:*:*:*:*:*:*2.17 core_update99VulnerableIPFire.org
cpe:2.3:a:ipfire:ipfire:2.19:core_update100:*:*:*:*:*:*2.19 core_update100VulnerableIPFire.org
cpe:2.3:a:ipfire:ipfire:2.19:core_update101:*:*:*:*:*:*2.19 core_update101VulnerableIPFire.org
cpe:2.3:a:ipfire:ipfire:2.19:core_update102:*:*:*:*:*:*2.19 core_update102VulnerableIPFire.org
cpe:2.3:a:ipfire:ipfire:2.19:core_update105:*:*:*:*:*:*2.19 core_update105VulnerableIPFire.org
cpe:2.3:a:ipfire:ipfire:2.19:core_update106:*:*:*:*:*:*2.19 core_update106VulnerableIPFire.org
cpe:2.3:a:ipfire:ipfire:2.19:core_update107:*:*:*:*:*:*2.19 core_update107VulnerableIPFire.org
cpe:2.3:a:ipfire:ipfire:2.19:core_update108:*:*:*:*:*:*2.19 core_update108VulnerableIPFire.org
cpe:2.3:a:ipfire:ipfire:2.19:core_update111:*:*:*:*:*:*2.19 core_update111VulnerableIPFire.org
cpe:2.3:a:ipfire:ipfire:2.19:core_update112:*:*:*:*:*:*2.19 core_update112VulnerableIPFire.org
cpe:2.3:a:ipfire:ipfire:2.19:core_update113:*:*:*:*:*:*2.19 core_update113VulnerableIPFire.org
cpe:2.3:a:ipfire:ipfire:2.19:core_update114:*:*:*:*:*:*2.19 core_update114VulnerableIPFire.org
cpe:2.3:a:ipfire:ipfire:2.19:core_update116:*:*:*:*:*:*2.19 core_update116VulnerableIPFire.org
cpe:2.3:a:ipfire:ipfire:2.19:core_update117:*:*:*:*:*:*2.19 core_update117VulnerableIPFire.org
cpe:2.3:a:ipfire:ipfire:2.19:core_update118:*:*:*:*:*:*2.19 core_update118VulnerableIPFire.org
cpe:2.3:a:ipfire:ipfire:2.19:core_update119:*:*:*:*:*:*2.19 core_update119VulnerableIPFire.org
cpe:2.3:a:ipfire:ipfire:2.19:core_update120:*:*:*:*:*:*2.19 core_update120VulnerableIPFire.org
cpe:2.3:a:ipfire:ipfire:2.21:core_update122:*:*:*:*:*:*2.21 core_update122VulnerableIPFire.org
cpe:2.3:a:ipfire:ipfire:2.21:core_update123:*:*:*:*:*:*2.21 core_update123VulnerableIPFire.org
  • cpe:2.3:a:ipfire:ipfire:2.13:core_update67:*:*:*:*:*:* Versions 2.13 core_update67 Vulnerable ·IPFire.org
  • cpe:2.3:a:ipfire:ipfire:2.13:core_update71:*:*:*:*:*:* Versions 2.13 core_update71 Vulnerable ·IPFire.org
  • cpe:2.3:a:ipfire:ipfire:2.13:core_update72:*:*:*:*:*:* Versions 2.13 core_update72 Vulnerable ·IPFire.org
  • cpe:2.3:a:ipfire:ipfire:2.13:core_update73:*:*:*:*:*:* Versions 2.13 core_update73 Vulnerable ·IPFire.org
  • cpe:2.3:a:ipfire:ipfire:2.13:core_update74:*:*:*:*:*:* Versions 2.13 core_update74 Vulnerable ·IPFire.org
  • cpe:2.3:a:ipfire:ipfire:2.13:core_update75:*:*:*:*:*:* Versions 2.13 core_update75 Vulnerable ·IPFire.org
  • cpe:2.3:a:ipfire:ipfire:2.13:core_update76:*:*:*:*:*:* Versions 2.13 core_update76 Vulnerable ·IPFire.org
  • cpe:2.3:a:ipfire:ipfire:2.13:rc_1:*:*:*:*:*:* Versions 2.13 rc_1 Vulnerable ·IPFire.org
  • cpe:2.3:a:ipfire:ipfire:2.13:rc_2:*:*:*:*:*:* Versions 2.13 rc_2 Vulnerable ·IPFire.org
  • cpe:2.3:a:ipfire:ipfire:2.15:76_rc1:*:*:*:*:*:* Versions 2.15 76_rc1 Vulnerable ·IPFire.org
  • cpe:2.3:a:ipfire:ipfire:2.15:77_rc1:*:*:*:*:*:* Versions 2.15 77_rc1 Vulnerable ·IPFire.org
  • cpe:2.3:a:ipfire:ipfire:2.15:77_rc2:*:*:*:*:*:* Versions 2.15 77_rc2 Vulnerable ·IPFire.org
  • cpe:2.3:a:ipfire:ipfire:2.15:core_update79:*:*:*:*:*:* Versions 2.15 core_update79 Vulnerable ·IPFire.org
  • cpe:2.3:a:ipfire:ipfire:2.15:core_update81:*:*:*:*:*:* Versions 2.15 core_update81 Vulnerable ·IPFire.org
  • cpe:2.3:a:ipfire:ipfire:2.15:core_update82:*:*:*:*:*:* Versions 2.15 core_update82 Vulnerable ·IPFire.org
  • cpe:2.3:a:ipfire:ipfire:2.15:core_update83:*:*:*:*:*:* Versions 2.15 core_update83 Vulnerable ·IPFire.org
  • cpe:2.3:a:ipfire:ipfire:2.15:core_update84:*:*:*:*:*:* Versions 2.15 core_update84 Vulnerable ·IPFire.org
  • cpe:2.3:a:ipfire:ipfire:2.15:core_update85:*:*:*:*:*:* Versions 2.15 core_update85 Vulnerable ·IPFire.org
  • cpe:2.3:a:ipfire:ipfire:2.17:86_beta1:*:*:*:*:*:* Versions 2.17 86_beta1 Vulnerable ·IPFire.org
  • cpe:2.3:a:ipfire:ipfire:2.17:87_rc1:*:*:*:*:*:* Versions 2.17 87_rc1 Vulnerable ·IPFire.org
  • cpe:2.3:a:ipfire:ipfire:2.17:core_update88:*:*:*:*:*:* Versions 2.17 core_update88 Vulnerable ·IPFire.org
  • cpe:2.3:a:ipfire:ipfire:2.17:core_update89:*:*:*:*:*:* Versions 2.17 core_update89 Vulnerable ·IPFire.org
  • cpe:2.3:a:ipfire:ipfire:2.17:core_update91:*:*:*:*:*:* Versions 2.17 core_update91 Vulnerable ·IPFire.org
  • cpe:2.3:a:ipfire:ipfire:2.17:core_update93:*:*:*:*:*:* Versions 2.17 core_update93 Vulnerable ·IPFire.org
  • cpe:2.3:a:ipfire:ipfire:2.17:core_update95:*:*:*:*:*:* Versions 2.17 core_update95 Vulnerable ·IPFire.org
  • cpe:2.3:a:ipfire:ipfire:2.17:core_update97:*:*:*:*:*:* Versions 2.17 core_update97 Vulnerable ·IPFire.org
  • cpe:2.3:a:ipfire:ipfire:2.17:core_update98:*:*:*:*:*:* Versions 2.17 core_update98 Vulnerable ·IPFire.org
  • cpe:2.3:a:ipfire:ipfire:2.17:core_update99:*:*:*:*:*:* Versions 2.17 core_update99 Vulnerable ·IPFire.org
  • cpe:2.3:a:ipfire:ipfire:2.19:core_update100:*:*:*:*:*:* Versions 2.19 core_update100 Vulnerable ·IPFire.org
  • cpe:2.3:a:ipfire:ipfire:2.19:core_update101:*:*:*:*:*:* Versions 2.19 core_update101 Vulnerable ·IPFire.org
  • cpe:2.3:a:ipfire:ipfire:2.19:core_update102:*:*:*:*:*:* Versions 2.19 core_update102 Vulnerable ·IPFire.org
  • cpe:2.3:a:ipfire:ipfire:2.19:core_update105:*:*:*:*:*:* Versions 2.19 core_update105 Vulnerable ·IPFire.org
  • cpe:2.3:a:ipfire:ipfire:2.19:core_update106:*:*:*:*:*:* Versions 2.19 core_update106 Vulnerable ·IPFire.org
  • cpe:2.3:a:ipfire:ipfire:2.19:core_update107:*:*:*:*:*:* Versions 2.19 core_update107 Vulnerable ·IPFire.org
  • cpe:2.3:a:ipfire:ipfire:2.19:core_update108:*:*:*:*:*:* Versions 2.19 core_update108 Vulnerable ·IPFire.org
  • cpe:2.3:a:ipfire:ipfire:2.19:core_update111:*:*:*:*:*:* Versions 2.19 core_update111 Vulnerable ·IPFire.org
  • cpe:2.3:a:ipfire:ipfire:2.19:core_update112:*:*:*:*:*:* Versions 2.19 core_update112 Vulnerable ·IPFire.org
  • cpe:2.3:a:ipfire:ipfire:2.19:core_update113:*:*:*:*:*:* Versions 2.19 core_update113 Vulnerable ·IPFire.org
  • cpe:2.3:a:ipfire:ipfire:2.19:core_update114:*:*:*:*:*:* Versions 2.19 core_update114 Vulnerable ·IPFire.org
  • cpe:2.3:a:ipfire:ipfire:2.19:core_update116:*:*:*:*:*:* Versions 2.19 core_update116 Vulnerable ·IPFire.org
  • cpe:2.3:a:ipfire:ipfire:2.19:core_update117:*:*:*:*:*:* Versions 2.19 core_update117 Vulnerable ·IPFire.org
  • cpe:2.3:a:ipfire:ipfire:2.19:core_update118:*:*:*:*:*:* Versions 2.19 core_update118 Vulnerable ·IPFire.org
  • cpe:2.3:a:ipfire:ipfire:2.19:core_update119:*:*:*:*:*:* Versions 2.19 core_update119 Vulnerable ·IPFire.org
  • cpe:2.3:a:ipfire:ipfire:2.19:core_update120:*:*:*:*:*:* Versions 2.19 core_update120 Vulnerable ·IPFire.org
  • cpe:2.3:a:ipfire:ipfire:2.21:core_update122:*:*:*:*:*:* Versions 2.21 core_update122 Vulnerable ·IPFire.org
  • cpe:2.3:a:ipfire:ipfire:2.21:core_update123:*:*:*:*:*:* Versions 2.21 core_update123 Vulnerable ·IPFire.org

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2018-16232
  2. 2026-10-03 Alias added: GHSA-pprx-2p4p-r72p

References

Exploit 1

Patch 1

  • TI-2021-12837 lfs/backup in IPFire 2.25-core155 does not ensure that /var/ipfire/backup/bin/backup.pl… CVSS 3.1HIGH 8.8
  • TI-2017-07141 IPFire 2.19 has a Remote Command Injection vulnerability in ids.cgi via the OINKCODE… CVSS 3.0HIGH 8.8
  • TI-2025-32283 IPFire 2.29 DNS management interface (dns.cgi) fails to properly sanitize user-supplied… CVSS 3.1MEDIUM 6.1
  • TI-2025-32282 IPFire 2.29 web-based firewall interface (firewall.cgi) fails to sanitize several rule… CVSS 3.1MEDIUM 5.4
  • TI-2025-24444 IPFire < v2.29 Command Injection via Proxy Report Creation CVSS 4.0HIGH 8.7
  • TI-2025-24445 IPFire < v2.29 Command Injection via URL Filter Blacklist CVSS 4.0HIGH 8.7
See all 31 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences