Log in Start free

Vulnerability · Published Dec 21, 2023 · Assigned by GitHub_M

CVE-2023-49084Local File Inclusion (RCE) in Cacti

High 8.1

In plain English

A high-severity security flaw in cacti from Cacti. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 64.4% (higher than 99.2% of all known vulnerabilities). Ready-made attack tooling exists: Metasploit. Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)8.1High
Exploit odds (30 days)64.4%top 0.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack tooling1Metasploit

Official description

Cacti is a robust performance and fault management framework and a frontend to RRDTool - a Time Series Database (TSDB). While using the detected SQL Injection and insufficient processing of the include file path, it is possible to execute arbitrary code on the server. Exploitation of the vulnerability is possible for an authorized user. The vulnerable component is the `link.php`. Impact of the vulnerability execution of arbitrary code on the server.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Alpine:v3.20cacti1.2.26-r0ALPINE-CVE-2023-49084
Alpine:v3.21cacti1.2.26-r0ALPINE-CVE-2023-49084
Alpine:v3.22cacti1.2.26-r0ALPINE-CVE-2023-49084
Alpine:v3.23cacti1.2.26-r0ALPINE-CVE-2023-49084
Alpine:v3.24cacti1.2.26-r0ALPINE-CVE-2023-49084
Debian:12cacti1.2.24+ds1-1+deb12u2DEBIAN-CVE-2023-49084
Debian:12cacti1.2.24+ds1-1+deb12u2DSA-5646-1
Debian:13cacti1.2.26+ds1-1DEBIAN-CVE-2023-49084
Debian:14cacti1.2.26+ds1-1DEBIAN-CVE-2023-49084

Affected products (as reported)

VendorProductVersions
Cacti cacti = 1.2.25

Weakness: CWE-98 · Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

References