vendor:
LibreNMS
by:
mhaskar, Shelby Pace
9.8
CVSS
CRITICAL
Command Injection
78
CWE
Product Name: LibreNMS
Affected Version From: Unknown
Affected Version To: Unknown
Patch Exists: NO
Related CWE: CVE-2018-20434
CPE: Unknown
Metasploit:
N/A
Other Scripts:
N/A
Platforms Tested: Linux
2018
LibreNMS addhost Command Injection
This module exploits a command injection vulnerability in the open source network management software known as LibreNMS. The community parameter used in a POST request to the addhost functionality is unsanitized. This parameter is later used as part of a shell command that gets passed to the popen function in capture.inc.php, which can result in execution of arbitrary code.
Mitigation:
Authentication to LibreNMS is required to exploit this vulnerability.