EDB-46221

PoC

Nagios XI 5.5.6 - Remote Code Execution / Privilege Escalation

view exploit source exploit_dbtype webappsauthor Chris Lynepublished 2019-01-23catalog exploit_db

exploited CVEs (2)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2018-15710US	high7.8	38.2% (99th)	Exploit	2018-11-14
Nagios XI 5.5.6 allows local authenticated attackers to escalate privileges to root via Autodiscover_new.php.
CVE-2018-15708US	critical9.8	89.4% (100th)	Exploit	2018-11-14
Snoopy 1.0 in Nagios XI 5.5.6 allows remote unauthenticated attackers to execute arbitrary commands via a crafted HTTP request.

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.