CVE-2002-1478

2004-09-0104:00:00

[email protected]

web.nvd.nist.gov

cacti

arbitrary command execution

cve-2002-1478

security vulnerability

nvd

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.3 High

AI Score

Confidence

High

0.016 Low

EPSS

Percentile

87.7%

JSON

Cacti before 0.6.8 allows attackers to execute arbitrary commands via the “Data Input” option in console mode.

Affected configurations

NVD

Node

the_cacti_groupcactiMatch0.5

the_cacti_groupcactiMatch0.6

the_cacti_groupcactiMatch0.6.1

the_cacti_groupcactiMatch0.6.2

the_cacti_groupcactiMatch0.6.3

the_cacti_groupcactiMatch0.6.4

the_cacti_groupcactiMatch0.6.5

the_cacti_groupcactiMatch0.6.6

the_cacti_groupcactiMatch0.6.7

the_cacti_groupcactiMatch0.6.8

CPENameOperatorVersion
the_cacti_group:cactithe cacti group cactieq0.5
the_cacti_group:cactithe cacti group cactieq0.6
the_cacti_group:cactithe cacti group cactieq0.6.1
the_cacti_group:cactithe cacti group cactieq0.6.2
the_cacti_group:cactithe cacti group cactieq0.6.3
the_cacti_group:cactithe cacti group cactieq0.6.4
the_cacti_group:cactithe cacti group cactieq0.6.5
the_cacti_group:cactithe cacti group cactieq0.6.6
the_cacti_group:cactithe cacti group cactieq0.6.7
the_cacti_group:cactithe cacti group cactieq0.6.8

CPE	Name	Operator	Version
the_cacti_group:cacti	the cacti group cacti	eq	0.5
the_cacti_group:cacti	the cacti group cacti	eq	0.6
the_cacti_group:cacti	the cacti group cacti	eq	0.6.1
the_cacti_group:cacti	the cacti group cacti	eq	0.6.2
the_cacti_group:cacti	the cacti group cacti	eq	0.6.3
the_cacti_group:cacti	the cacti group cacti	eq	0.6.4
the_cacti_group:cacti	the cacti group cacti	eq	0.6.5
the_cacti_group:cacti	the cacti group cacti	eq	0.6.6
the_cacti_group:cacti	the cacti group cacti	eq	0.6.7
the_cacti_group:cacti	the cacti group cacti	eq	0.6.8