Main Vulnerability Database Vulnerabilities #VU80429

OS Command Injection in Cacti - CVE-2023-39362

Published: September 5, 2023 / Updated: October 25, 2024

Vulnerability identifier: #VU80429

CSH Severity: Medium

CVSS v4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2023-39362

CWE-ID: CWE-78

Exploitation vector: Remote access

Exploit availability: Public exploit is available

Vulnerability details

The vulnerability allows a remote user to execute arbitrary shell commands on the target system.

The vulnerability exists due to improper input validation in lib/snmp.php. A remote user attacker can pass specially crafted data to the application and execute arbitrary OS commands on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Affected software

Cacti
Amazon Linux AMI
Debian Linux
Fedora
cacti
cacti (Debian package)
cacti-spine

How to mitigate CVE-2023-39362

Install updates from vendor's website.

Cacti - update to 1.2.25
cacti - update to 1.1.19-5.23
cacti (Debian package) - addressed in versions 1.2.16+ds1-2+deb11u2, 1.2.24+ds1-1+deb12u1
cacti - addressed in versions 1.2.25-1.el7, 1.2.25-1.el8, 1.2.25-1.el9, 1.2.25-1.fc37, 1.2.25-1.fc38, 1.2.25-1.fc39
cacti-spine - addressed in versions 1.2.25-1.el7, 1.2.25-1.el8, 1.2.25-1.el9, 1.2.25-1.fc37, 1.2.25-1.fc38, 1.2.25-1.fc39

Links to Public Exploits and PoC-codes

External References

https://github.com/Cacti/cacti/security/advisories/GHSA-g6ff-58cj-x3cp