Skip to content
VulniPulse
High8.5Netgate pfSense

CVE-2016-20057: pfSense NETGATE Registry Cleaner build 16.0.205 Unquoted Service Path Privilege Escalation

This pfSense advisory covers CVE-2016-20057 in NETGATE Registry Cleaner.

Open the pfSense advisory

Key facts

Vendor rating
High, CVSS 8.5
CISA KEV
Not listed (catalogue checked )
Affected
NETGATE Registry Cleaner 16.0.205
Source published
Source revised
Listed by VulniPulse

Compiled by VulniPulse from the linked sources. How records are collected and checked.

Affected products & platforms

Netgate pfSenseUnclassified

Description

NETGATE Registry Cleaner build 16.0.205 contains an unquoted service path vulnerability in the NGRegClnSrv service that allows local attackers to escalate privileges by exploiting the service binary path. Attackers can place a malicious executable in the unquoted path and trigger service restart or system reboot to execute code with LocalSystem privileges.

Text from the source record.

Affected versions
  • NETGATE Registry Cleaner 16.0.205

Official advisory · high-confidence parse· fetched ·verify at source

Netgate pfSense advisories, April 2026All Netgate pfSense advisories

Get an email when pfSense publishes the next one.

See pfSense's last 90 days of advisories first. Then choose one product with live alerts free for life, or a free month of real-time alerts on everything with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).

Alert me about pfSense

iPhone and Android apps · New on the App Store

Monitor future Netgate pfSense CVEs from your phone.

Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.