CVE-2025-34310: ipfire before 2.29 (exclusive), 2.29 · update core_update183, 2.29 · update core_update184 (+13 more affected…

Affected technology

ipfire · before 2.29 (exclusive)
ipfire

ipfire · 2.29 · update core_update183
ipfire

ipfire · 2.29 · update core_update184
ipfire

ipfire · 2.29 · update core_update185
ipfire

ipfire · 2.29 · update core_update186
ipfire

ipfire · 2.29 · update core_update187
ipfire

ipfire · 2.29 · update core_update188
ipfire

ipfire · 2.29 · update core_update189
ipfire

ipfire · 2.29 · update core_update190
ipfire

ipfire · 2.29 · update core_update191
ipfire

ipfire · 2.29 · update core_update192
ipfire

ipfire · 2.29 · update core_update193
ipfire

ipfire · 2.29 · update core_update194
ipfire

ipfire · 2.29 · update core_update195
ipfire

ipfire · 2.29 · update core_update196
ipfire

ipfire · 2.29 · update core_update197
ipfire

IPFire · 0 to before 2.29 (Core Update 198)
IPFire.org

Description’s affected range: versions prior to 2.29 (Core Update 198)

Component: /cgi-bin/qos.cgi

Attack conditions (Vendor/CNA, CVSS 4.0): Network (remote) · Low privileges required · Passive user interaction

What an attacker can do

An authenticated attacker can inject arbitrary JavaScript code through the INC_SPD, OUT_SPD, DEFCLASS_INC, and DEFCLASS_OUT parameters when updating Quality of Service (QoS) settings. Vendor/CNA’s CVSS 4.0 assessment (base score 5.1/10) rates confidentiality, integrity and availability impact as none.