A critical command injection vulnerability in FreeBSD rtsol and rtsold programs allows unauthenticated attackers to achieve remote code execution on affected systems.

This is an improper input validation flaw (CWE-20) where malicious router advertisement packets containing crafted domain search list options are passed to the resolvconf shell script without proper quoting, leading to arbitrary shell command execution. The vulnerability is network-accessible and does not require user interaction.

Successful exploitation grants an attacker the ability to execute arbitrary commands with the privileges of the script execution context, potentially leading to full system compromise. Given the CVSS score of 7.2, this represents a significant risk to confidentiality, integrity, and availability. Unauthorized access to network infrastructure or core servers could result in severe data breaches and operational disruption.

Immediate Action: Update FreeBSD systems to the patched releases (15.0-RELEASE-p1, 14.3-RELEASE-p7, or 13.5-RELEASE-p8) as specified in the official FreeBSD security advisory.

Proactive Monitoring: Monitor system logs for unexpected execution of resolvconf or unusual shell processes spawned by network-related daemons.

Compensating Controls: Restrict network access to untrusted devices and implement ingress filtering to block unsolicited router advertisement messages at the network perimeter.

Public Exploit Available: Yes, a Metasploit module and ExploitDB entry exist.

This vulnerability presents a severe risk due to the potential for remote code execution and the availability of weaponized exploit code. Organizations running the affected FreeBSD versions must prioritize patching immediately. If patching is not immediately feasible, network-level controls to prevent unauthorized router advertisement traffic should be enforced to reduce the attack surface.