CVE-2018-8735 Remote command execution (RCE) vulnerability in Nagios XI 5.2.x through 5.4.x before 5.4.13 allows an attacker to execute arbitrary commands on the target system, aka OS command injection.
HighCVSS 8.8
EPSS 63.6%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Remote command execution (RCE) vulnerability in Nagios XI 5.2.x through 5.4.x before 5.4.13 allows an attacker to execute arbitrary commands on the target system, aka OS command injection.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| nagios xi | >= 5.2.0, < 5.4.13 | 5.4.13 |
References
- assets.nagios.com release-notes vendor-advisory
- blog.redactedsec.net exploit technical-description third-party-advisory
- gist.github.com third-party-advisory
- 44560 exploit third-party-advisory vdb-entry
- 44969 exploit third-party-advisory vdb-entry
- www.nagios.com release-notes vendor-advisory