The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Cacti is an open source operational monitoring and fault management framework. In Cacti 1.2.24, under certain conditions, an authenticated privileged user, can use a malicious string in the SNMP options of a Device, performing command injection and obtaining remote code execution on the underlying server. The `lib/snmp.php` file has a set of functions, with similar behavior, that accept in input some variables and place them into an `exec` call without a proper escape or validation. This issue has been addressed in version 1.2.25. Users are advised to upgrade. There are no known workarounds for this vulnerability.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade cacti | Aug 22, 2024 | Sep 5, 2023 |
| Amazon_linux | — | Upgrade cacti | Oct 25, 2023 | Sep 5, 2023 |
| Debian | — | Upgrade cacti | Nov 13, 2023 | Sep 5, 2023 |
| Gentoo Linux | — | Upgrade net-analyzer/cacti. | Dec 9, 2024 | Sep 5, 2023 |
| Suse | — | Upgrade cactiUpgrade cacti-spine | Sep 27, 2023 | Sep 5, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub