PT-2020-13962 · Cacti+3 · Cacti+3

Mayfly277 · Published 2020-06-17 · Updated 2024-06-15 · CVE-2020-14295

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Cacti version 1.2.12

Description A SQL injection issue in the color.php file allows an admin to inject SQL via the filter parameter. This can lead to remote command execution because the product accepts stacked queries.

Recommendations For Cacti version 1.2.12, avoid using the filter parameter in the color.php file until a patch is available. As a temporary workaround, consider restricting access to the color.php file to minimize the risk of exploitation.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2020-14295

OPENSUSE-SU-2020:1060-1

OPENSUSE-SU-2020:1106-1

OPENSUSE-SU-2020_1060-1

OPENSUSE-SU-2024:10670-1

USN-5214-1

Affected Products

Cacti

Linuxmint

Suse

Ubuntu

References · 68

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/http/cacti_filter_sqli_rce.rb · Exploit
• 🔥 https://github.com/Cacti/cacti/issues/3622 · Exploit
• 🔥 https://github.com/0xAJ2K/CVE-2020-11022-CVE-2020-11023 · Exploit
• 🔥 https://github.com/ossf-cve-benchmark/CVE-2020-11022 · Exploit
• 🔥 https://github.com/0z09e/CVE-2020-14295 · Exploit
• 🔥 http://packetstormsecurity.com/files/162384/Cacti-1.2.12-SQL-Injection-Remote-Code-Execution.html · Exploit
• 🔥 https://exploit-db.com/exploits/49810 · Exploit
• 🔥 http://packetstormsecurity.com/files/162918/Cacti-1.2.12-SQL-Injection-Remote-Command-Execution.html · Exploit
• https://security-tracker.debian.org/tracker/CVE-2020-14295 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-14424 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10670-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-14295 · Vendor Advisory
• https://security.gentoo.org/glsa/202007-03 · Vendor Advisory
• https://osv.dev/vulnerability/USN-5214-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2020:1060-1 · Vendor Advisory