Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-06075
HistoryJan 17, 2023 - 12:00 a.m.

Netdata Command Injection Vulnerability

2023-01-1700:00:00
China National Vulnerability Database
www.cnvd.org.cn
23
netdata
command injection
vulnerability
streaming connection
arbitrary commands
privilege escalation

0.002 Low

EPSS

Percentile

54.6%

Netdata is a high-fidelity infrastructure monitoring and troubleshooting application open-sourced by Netdata. Netdata is vulnerable to a command injection vulnerability that stems from the fact that an attacker who is able to establish a streaming connection can execute arbitrary commands on the target agent, which can be exploited to escalate privileges by escalating other vulnerabilities in the system as that user.

CPENameOperatorVersion
netdata netdatalt1.37.0

0.002 Low

EPSS

Percentile

54.6%