CVE-2023-39006

Summary

CVE-2023-39006 refers to a vulnerability affecting the Crash Reporter component in OPNsense Community Edition up to 23.7 and Business Edition up to 23.4.2. This issue involves inadequate input sanitization in crash_reporter.php, which can lead to arbitrary code execution. Successful exploitation may result in unauthorized access, data theft, or system compromise. Users are advised to update their OPNsense installations as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.