Remote command execution (RCE) vulnerability in Nagios XI 5.2.x through 5.4.x before 5.4.13 allows an attacker to execute arbitrary command…

Exploit prediction (EPSS)

63.56% probability of exploitation in the next 30 days, higher than 99% of all scored CVEs.

Exploits and detections

• Metasploit exploit/linux/http/nagios_xi_chained_rce_2_electric_boogaloo Nagios XI Chained Remote Code Execution · metasploit exploit, manual rank · 2018-04-17
• Metasploit exploit/linux/http/nagios_xi_chained_rce Nagios XI Chained Remote Code Execution · metasploit exploit, excellent rank · 2016-03-06
• EDB-44969 Nagios XI 5.2.6-5.4.12 - Chained Remote Code Execution (Metasploit) · remote · 2018-07-02
• EDB-44560 Nagios XI 5.2.6 < 5.2.9 / 5.3 / 5.4 - Chained Remote Root · webapps · 2018-04-30

CVSS scores

Classification

Weakness

• CWE-78 Improper Neutralization of Special Elements used in an OS Command

References

• gist.github.com /caleBot/f0a93b5a98574393e0139104eacc2d0f · x_refsource_MISC, x_transferred
• exploit-db.com /exploits/44560/ · exploit, x_refsource_EXPLOIT-DB, x_transferred
• nagios.com /downloads/nagios-xi/change-log/ · x_refsource_MISC, x_transferred
• blog.redactedsec.net /exploits/2018/04/26/nagios.html · x_refsource_MISC, x_transferred
• assets.nagios.com /downloads/nagiosxi/CHANGES-5.TXT · x_refsource_MISC, x_transferred
• exploit-db.com /exploits/44969/ · exploit, x_refsource_EXPLOIT-DB, x_transferred

Sources

• CVE List: CVE-2018-8735
• NVD: CVE-2018-8735

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.