CVE-2023-28354

CVE-2023-28354 脆弱性の説明 Opsview Monitor Agent 6.8 に、認証されていないリモート攻撃者が任意のコマンドを実行できる脆弱性が確認されました。認証されていない攻撃者は、Windows 上でデフォルトの Opsview Agent Monitor スクリプトを呼び出す際にコマンドラインエスケープシーケンスを指定することでこの脆弱性を悪用し、任意のシステムコマンドを実行できます。 説明 Windows 上の Opsview Agent サービスは、デフォルトで Local System として実行されます。このデフォルト構成には複数の NRPE...

CVE-2023-28354

An issue was discovered in Opsview Monitor Agent 6.8. An unauthenticated remote attacker can call checknrpe against affected targets, specifying known NRPE plugins, which in default installations are configured to accept command control characters and pass them to command-line interpreters for NR...

Opsview Monitor Agent 安全漏洞

Opsview Monitor Agent is a monitoring platform agent program from Opsview. A security vulnerability exists in Opsview Monitor Agent version 0.3.9.700 2022-09-28 and earlier, which stems from the ability of an unauthenticated remote attacker to invoke the checknrpe specified plug-in, which allows...

CVE-2023-28354

An issue was discovered in Opsview Monitor Agent 6.8. An unauthenticated remote attacker can call checknrpe against affected targets, specifying known NRPE plugins, which in default installations are configured to accept command control characters and pass them to command-line interpreters for NR...

CVE-2023-28354: Improper Control of Generation of Code

An issue was discovered in Opsview Monitor Agent 6.8. An unauthenticated remote attacker can call checknrpe against affected targets, specifying known NRPE plugins, which in default installations are configured to accept command control characters and pass them to command-line interpreters for NR...

CVE-2023-28354

An issue was discovered in Opsview Monitor Agent 6.8. An unauthenticated remote attacker can call checknrpe against affected targets, specifying known NRPE plugins, which in default installations are configured to accept command control characters and pass them to command-line interpreters for NR...

PT-2025-1386 · Opsview · Opsview Monitor Agent

Name of the Vulnerable Software and Affected Versions: Opsview Monitor Agent version 6.8 Description: A problem was discovered in Opsview Monitor Agent where an unauthenticated remote attacker can call check nrpe against affected targets, specifying known NRPE plugins. In default installations,...

CVE-2023-28354

A vulnerability exists in Opsview Monitor Agent 6.8 (specifically version 0.3.9.700 2022-09-28 and earlier) where an unauthenticated remote attacker can execute arbitrary commands as NT_AUTHORITY\SYSTEM . The root cause is that NRPE handlers are insecurely configured to accept command-line escape...