9

CVE-2009-4112

Exploit

Cacti 0.8.7e and earlier allows remote authenticated administrators to gain privileges by modifying the "Data Input Method" for the "Linux - Get Memory Usage" setting to contain arbitrary commands.

Data is provided by the National Vulnerability Database (NVD)
Cacti ≫ Cacti Version <= 0.8.7e
Cacti ≫ Cacti Version0.6.7
Cacti ≫ Cacti Version0.8
Cacti ≫ Cacti Version0.8.1
Cacti ≫ Cacti Version0.8.2
Cacti ≫ Cacti Version0.8.2a
Cacti ≫ Cacti Version0.8.3
Cacti ≫ Cacti Version0.8.3a
Cacti ≫ Cacti Version0.8.4
Cacti ≫ Cacti Version0.8.5
Cacti ≫ Cacti Version0.8.5a
Cacti ≫ Cacti Version0.8.6c
Cacti ≫ Cacti Version0.8.6f
Cacti ≫ Cacti Version0.8.6i
Cacti ≫ Cacti Version0.8.7
Cacti ≫ Cacti Version0.8.7a
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 8.43% 0.915
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 9 8 10
AV:N/AC:L/Au:S/C:C/I:C/A:C