CVE 2016-10709
pfSense before 2.3 allows remote authenticated users to execute arbitrary OS commands via a '|' character in the status_
See the
CVE page on Mitre.org
for more details.
pfSense before 2.3 allows remote authenticated users to execute arbitrary OS commands via a '|' character in the status_