CVE-2017-16641

CVE-2017-16641 affects Cacti 1.1.27 where lib/rrd.php allows remote authenticated administrators to execute arbitrary OS commands via path_rrdtool in an action=save to settings.php. Various advisories confirm this flaw and classify its impact as high (arbitrary command execution) with remote acce...