CVE-2021-37344

—

CVSS 3.1

9.8 critical

EPSS

97%p100

Published

Aug 13, 2021 (Aug 13, 2021)

Modified

Jun 17, 2026

Description

Nagios XI Switch Wizard before version 2.5.7 is vulnerable to remote code execution through improper neutralisation of special elements used in an OS Command (OS Command injection).

Vendors: nagios
Products: nagios xi switch wizard
Weakness: CWE-78
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (96.8%)

In the news2 stories

New Nagios Software Bugs Could Let Hackers Take Over IT Infrastructures

The Hacker NewsSep 27, 04:39 UTC · Sep 27, 2021Exploit / PoC CVE-2021-37344 CVE-2021-37346 CVE-2021-37350+8 CVEs1

Flaws in Nagios Network Management systems pose risk to companies

Security AffairsSep 22, 15:08 UTC · Sep 22, 2021Exploit / PoC CVE-2021-37353 CVE-2021-37352 CVE-2021-37351+8 CVEs