Exploit / PoCcriticalExploited in the wild

Critical Flaws in Cacti Framework Could Let Attackers Execute Malicious Code

The Hacker Newsby @TheHackersNewsMay 15, 2024 · 00:00 UTC (May 15, 2024)2 min read4 · 1 read

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2024-25641 CVE-2024-29895 CVE-2024-31445 CVE-2024-31459 CVE-2024-30268 CVE-2023-39361 CVE-2022-46169

Tags: cve-2024-25641 cve-2024-29895 cve-2024-31445 cve-2024-31459 cve-2024-30268 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2022-46169	Unauthenticated Command Injection in Cacti (CVE-2022-46169)	9.8	100%	KEVPoC	Dec 5, 2022 KEV Feb 16, 2023
CVE-2023-39361	Cacti: Affected versions are subject to a SQL injection discovered in graph_view.php. Since guest users can access graph_view.php…	9.8	89%	PoC	Sep 5, 2023
CVE-2024-29895 +4 related CVEs CVE-2024-31445 CVE-2024-25641 CVE-2024-31459 CVE-2024-30268	Cacti provides an operational monitoring and fault management framework	10.0 group max	98%		May 14, 2024

From the original article

2 min read at thehackernews.com

 Ravie Lakshmanan  May 14, 2024 Network Monitoring / Vulnerability The maintainers of the Cacti open-source network monitoring and fault management framework have addressed a dozen security flaws, including two critical issues that could lead to the execution of arbitrary code. CVE-2024-25641 (CVSS score: 9.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.