CVE-2014-4690

CVE-2014-4690 describes multiple directory traversal vulnerabilities affecting pfSense versions prior to 2.1.4. Specifically, unauthenticated remote attackers could read arbitrary .info files via pkg_mgr_install.php, and authenticated remote users could read arbitrary files via system_firmware_restorefullbackup.php. The CVSS score of 5.0 indicates a medium severity, with a network attack vector, low complexity, and potential for partial confidentiality impact. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.