All CVE records

CVE-2020-8816 — Pi-Hole AdminLTE Remote Code Execution Vulnerability

CISA KEV listed Added December 10, 2021 Remediate by June 10, 2022

Description

Pi-hole Web v4.3.2 (aka AdminLTE) allows Remote Code Execution by privileged dashboard users via a crafted DHCP static lease.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2020-8816

Need help remediating this vulnerability?

Our team helps organizations patch, mitigate, and respond to CISA KEV advisories fast.

Talk to an engineer