Vulnerabilities

TI-2019-09397 CVE-2019-12585 · GHSA-h8cj-r9q8-q267

Apcupsd 0.3.91_5, as used in pfSense through 2.4.4-RELEASE-p3 and other products, has an…

MEDIUM 50

Apcupsd 0.3.91_5, as used in pfSense through 2.4.4-RELEASE-p3 and other products, has an Arbitrary Command Execution issue in apcupsd_status.php.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.0503 Published 2019-06-03 No fix listed CWE-78

TI-2019-09396 CVE-2019-12584 · GHSA-rq9v-rxgf-2vq4

Apcupsd 0.3.91_5, as used in pfSense through 2.4.4-RELEASE-p3 and other products, has an…

LOW 32

Apcupsd 0.3.91_5, as used in pfSense through 2.4.4-RELEASE-p3 and other products, has an XSS issue in apcupsd_status.php.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.02558 Published 2019-06-03 No fix listed CWE-79

TI-2003-00093 CVE-2003-0098 · GHSA-9xf5-hxpg-rcfj

Unknown vulnerability in apcupsd before 3.8.6, and 3.10.x before 3.10.5, allows remote…

MEDIUM 51

Unknown vulnerability in apcupsd before 3.8.6, and 3.10.x before 3.10.5, allows remote attackers to gain root privileges, possibly via format strings in a request to a slave server.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05132 Published 2003-02-26 No fix listed

Vulnerabilities

Filters

Apcupsd 0.3.91_5, as used in pfSense through 2.4.4-RELEASE-p3 and other products, has an…

Apcupsd 0.3.91_5, as used in pfSense through 2.4.4-RELEASE-p3 and other products, has an…

Unknown vulnerability in apcupsd before 3.8.6, and 3.10.x before 3.10.5, allows remote…