exploit/linux/http/nagios_xi_configwizards_authenticated_rce
weaponizedNagios XI 5.5.6 to 5.7.5 - ConfigWizards Authenticated Remote Code Exection
01
exploited CVEs (3)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-25298US | high8.8OT critical | KEV | ||
Nagios XI version xi-5.7.5 is affected by OS command injection. The vulnerability exists in the file /usr/local/nagiosxi/html/includes/configwizards/cloud-vm/cloud-vm.inc.php due t… | ||||
| CVE-2021-25297US | high8.8OT critical | KEV | ||
Nagios XI version xi-5.7.5 is affected by OS command injection. The vulnerability exists in the file /usr/local/nagiosxi/html/includes/configwizards/switch/switch.inc.php due to im… | ||||
| CVE-2021-25296US | high8.8OT critical | KEV | ||
Nagios XI version xi-5.7.5 is affected by OS command injection. The vulnerability exists in the file /usr/local/nagiosxi/html/includes/configwizards/windowswmi/windowswmi.inc.php d… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan