Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2025-34173: pfSense CE Snort package lets logged‑in user discover file existence

CVE-2025-34173 · published 1 year ago

Summary

The Snort add‑on in pfSense CE reveals whether specific files are present on the system when a user with limited administrative rights accesses it. This information can help an attacker map the server’s file structure, potentially aiding further attacks. Restrict Snort package access to trusted administrators and apply the vendor’s update that validates file‑name inputs.

What to do

Update pfsense pfsense to version 2.8.0 or later.

Affected software

Vendor	Product	Affected versions
pfsense	pfsense	< 2.8.0 `cpe:2.3:a:pfsense:pfsense:::::community:::*`
netgate	pfsense ce	4.1.6_25

Original advisory text

Netgate pfSense CE Snort package v4.1.6_25 Directory Traversal Information Disclosure

In pfSense CE /usr/local/www/snort/snort_ip_reputation.php, the value of the iplist parameter is not sanitized of directory traversal-related characters/strings before being used to check if a file exists. While the contents of the file cannot be read, the server reveals whether a file exists, which allows an attacker to enumerate files on the target. The attacker must be authenticated with at least "WebCfg - Services: Snort package" permissions.

References

https://www.vulncheck.com/advisories/netgate-pf-sense-ce-snort-directory-travers... Vendor Advisory
https://redmine.pfsense.org/issues/16412 Third Party Advisory
https://github.com/pfsense/FreeBSD-ports/commit/d6f462bcc446969f8955c16cfde300d5... Patch
https://github.com/pfsense/FreeBSD-ports/tree/main URL
https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/34xxx/CVE-2025-34173... Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-34173 Vendor Advisory

Fix within

Internet-facing 60 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit
Gives an attacker partial control

Severity

7.3 High

Exploitation

<1% chance of attack within 30 days

Type

CWE-22Path Traversal

Timeline

Published9 Sep 2025

Updated3 Nov 2026

First seen7 Mar 2026

Sources

CVE-2025-34173 · NVD

CVE-2025-34173 · MITRE

CVE-2025-34173 · OSV

Track software like this

Free during beta