CVE-2023-39362
CVSS 3.1 Score 7.2 of 10 (high)
Details
Summary
CVE-2023-39362 is a vulnerability in Cacti, an open source operational monitoring and fault management framework. In Cacti version 1.2.24, an authenticated privileged user can exploit the SNMP options of a device by injecting malicious strings, leading to command injection and remote code execution on the server. The issue has been addressed in version 1.2.25, and users are advised to upgrade to this version. This vulnerability affects multiple products listed under the 'affected_products' field. The potential danger includes high risks to integrity and confidentiality, with a base severity rating of HIGH (7.2) according to [email protected]'s analysis.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions