CVE

CVE-2020-8816

Pi-Hole AdminLTE Remote Code Execution Vulnerability

Pi-hole · AdminLTE

Date added (CISA)

2021-12-10

Remediation due

2022-06-10

Known ransomware use

Not indicated

Remediation priority

P2 — past CISA due date

Description

Pi-hole Web v4.3.2 (aka AdminLTE) allows Remote Code Execution by privileged dashboard users via a crafted DHCP static lease.