Lucene search

K
hiveproHiveForce LabHIVEPRO:C483CC3EA604C19B59C232343EEF7493
HistoryJan 16, 2023 - 10:56 a.m.

The Vulnerability Discovered in the Cacti Open-Source RRD tool

2023-01-1610:56:28
HiveForce Lab
www.hivepro.com
34

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Threat Level Vulnerability Report For a detailed threat advisory, download the pdf file here Summary A high-severity vulnerability named CVE-2022-46169 has been found in Cacti, a free, open-source, web-based network monitoring and graphing tool designed as a front-end application for the open-source data logging tool RRDtool. The vulnerability allows for command injection and remote code execution and was first detailed in a security advisory by Cacti in December 2022.

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H