CVE-2018-15708

Published: Nov 14, 2018 Last Modified: Nov 21, 2024
ExploitDB:
Other exploit source:
Google Dorks:
CRITICAL 9,8
Source: [email protected]
Attack Vector: network
Attack Complexity: low
Privileges Required: none
User Interaction: none
Scope: unchanged
Confidentiality: high
Integrity: high
Availability: high
HIGH 7,5
Source: [email protected]
Access Vector: network
Access Complexity: low
Authentication: none
Confidentiality: partial
Integrity: partial
Availability: partial

Description

AI Translation Available

Snoopy 1.0 in Nagios XI 5.5.6 allows remote unauthenticated attackers to execute arbitrary commands via a crafted HTTP request.

EPSS (Exploit Prediction Scoring System)

Trend Analysis

EPSS (Exploit Prediction Scoring System)

Prevede la probabilità di sfruttamento basata su intelligence sulle minacce e sulle caratteristiche della vulnerabilità.

EPSS Score
0,9181
Percentile
1,0th
Updated

EPSS Score Trend (Last 90 Days)

Exploit

Nagios XI 5.5.6 - Remote Code Execution / …

Nagios XI 5.5.6 - Remote Code Execution / Privilege Escalation

Author: Chris Lyne Published:
View Exploit Code →
Exploit

Nagios XI 5.5.6 - Magpie_debug.php Root Remote Code …

Verified Metasploit Framework (MSF)

Nagios XI 5.5.6 - Magpie_debug.php Root Remote Code Execution (Metasploit)

Author: Metasploit Published: Status: Verified
View Exploit Code →
Application

Nagios Xi by Nagios

Product Information
Vendor Nagios
Product Nagios Xi
Version 5.5.6
cpe:2.3:a:nagios:nagios_xi:5.5.6:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
http://packetstormsecurity.com/files/153433/Nagios-XI-Magpi…
http://packetstormsecurity.com/files/153433/Nagios-XI-Magpie_debug.php-Root-Rem…
https://www.exploit-db.com/exploits/46221/
Exploit Third Party Advisory VDB Entry
https://www.exploit-db.com/exploits/46221/
https://www.tenable.com/security/research/tra-2018-37
Exploit Third Party Advisory
https://www.tenable.com/security/research/tra-2018-37
http://packetstormsecurity.com/files/153433/Nagios-XI-Magpi…
http://packetstormsecurity.com/files/153433/Nagios-XI-Magpie_debug.php-Root-Rem…
https://www.exploit-db.com/exploits/46221/
Exploit Third Party Advisory VDB Entry
https://www.exploit-db.com/exploits/46221/
https://www.tenable.com/security/research/tra-2018-37
Exploit Third Party Advisory
https://www.tenable.com/security/research/tra-2018-37