ID:12637 - Exploit for Command injection in LibreNMS - CVE-2024-51092

Link to public exploit:

Vulnerability description

The vulnerability allows a remote user to execute arbitrary code.

The vulnerability exists due to command injection in AboutController.php when processing the /about page with a poisoned snmpget configuration value. A remote user can modify configuration parameters and create a crafted device hostname to execute arbitrary code.

Exploitation requires chaining the ability to create a device with shell metacharacters in its hostname and to update the snmpget setting through the web portal.

Remediation