Vulnerability · Published Feb 22, 2020 · Assigned by mitre
CVE-2020-8813
High 8.8
In plain English
A high-severity security flaw in the cacti package (Alpine). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 74.0% (higher than 99.5% of all known vulnerabilities). Ready-made attack tooling exists: Nuclei, public proof-of-concept code. Fixed versions are available - upgrade the affected package.
Severity (CVSS NVD)8.8High
Exploit odds (30 days)74.0%top 0.5% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack tooling2Nuclei, Public PoC
Official description
graph_realtime.php in Cacti 1.2.8 allows remote attackers to execute arbitrary OS commands via shell metacharacters in a cookie, if a guest user has the graph real-time privilege.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine:v3.20 | cacti | 1.2.8-r0 | ALPINE-CVE-2020-8813 |
| Alpine:v3.21 | cacti | 1.2.8-r0 | ALPINE-CVE-2020-8813 |
| Alpine:v3.22 | cacti | 1.2.8-r0 | ALPINE-CVE-2020-8813 |
| Alpine:v3.23 | cacti | 1.2.8-r0 | ALPINE-CVE-2020-8813 |
| Alpine:v3.24 | cacti | 1.2.8-r0 | ALPINE-CVE-2020-8813 |
| Debian:12 | cacti | 1.2.10+ds1-1 | DEBIAN-CVE-2020-8813 |
| Debian:13 | cacti | 1.2.10+ds1-1 | DEBIAN-CVE-2020-8813 |
| Debian:14 | cacti | 1.2.10+ds1-1 | DEBIAN-CVE-2020-8813 |
Affected products (as reported)
References
- https://gist.github.com/mhaskar/ebe6b74c32fd0f7e1eedf1aabfd44129
- https://drive.google.com/file/d/1A8hxTyk_NgSp04zPX-23nPbsSDeyDFio/view
- https://github.com/Cacti/cacti/releases
- https://shells.systems/cacti-v1-2-8-authenticated-remote-code-execution-cve-2020-8813/
- https://github.com/Cacti/cacti/issues/3285
- http://packetstormsecurity.com/files/156538/Cacti-1.2.8-Authenticated-Remote-Code-Execution.html
- http://packetstormsecurity.com/files/156537/Cacti-1.2.8-Unauthenticated-Remote-Code-Execution.html
- http://packetstormsecurity.com/files/156593/Cacti-1.2.8-Unauthenticated-Remote-Code-Execution.html
- FEDORA-2020-552e4e7879 vendor-advisory
- FEDORA-2020-10fe60d68b vendor-advisory
- FEDORA-2020-d6a9e27bb1 vendor-advisory
- openSUSE-SU-2020:0558 vendor-advisory
- http://packetstormsecurity.com/files/157477/Open-AudIT-Professional-3.3.1-Remote-Code-Execution.html
- openSUSE-SU-2020:0565 vendor-advisory
- GLSA-202004-16 vendor-advisory
- [debian-lts-announce] 20221231 [SECURITY] [DLA 3252-1] cacti security update mailing-list