PT-2020-19487 · Cacti+2 · Cacti+2

0Xfatty · Published 2020-01-20 · Updated 2025-01-24 · CVE-2020-7237

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cacti version 1.2.8

Description The issue allows remote code execution by privileged users through shell metacharacters in the Performance Boost Debug Log field of poller automation.php. This occurs when a new poller cycle begins, requiring the attacker to be authenticated and have access to modify the Performance Settings of the product.

Recommendations For Cacti version 1.2.8, consider disabling access to the Performance Boost Debug Log field in poller automation.php until a patch is available, and restrict modifications to the Performance Settings to trusted users only.

Exploit

Fix

RCE

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

ALT-PU-2020-1488

ALT-PU-2020-3430

ALT-PU-2025-1813

CVE-2020-7237

OPENSUSE-SU-2020:0272-1

OPENSUSE-SU-2020:0284-1

OPENSUSE-SU-2020:0558-1

OPENSUSE-SU-2020:0565-1

OPENSUSE-SU-2020_0272-1

OPENSUSE-SU-2020_0558-1

OPENSUSE-SU-2024:10670-1

Affected Products

Alt Linux

Cacti

Suse

References · 91

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/cacti_pollers_sqli_rce.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/cacti_package_import_rce.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/cacti_unauthenticated_cmd_injection.rb · Exploit
• 🔥 https://github.com/Cacti/cacti/issues/3201 · Exploit
• 🔥 https://github.com/mhaskar/CVE-2020-8813 · Exploit
• 🔥 https://github.com/0xf4n9x/CVE-2022-46169 · Exploit
• 🔥 https://github.com/FredBrave/CVE-2022-46169-CACTI-1.2.22 · Exploit
• 🔥 https://github.com/sAsPeCt488/CVE-2022-46169 · Exploit
• 🔥 https://github.com/ariyaadinatha/cacti-cve-2022-46169-exploit · Exploit
• 🔥 https://github.com/botfather0x0/CVE-2022-46169 · Exploit
• 🔥 https://github.com/Anthonyc3rb3ru5/CVE-2022-46169 · Exploit
• 🔥 https://github.com/deadyP00l/CVE-2022-46169 · Exploit
• 🔥 https://github.com/c3rrberu5/CVE-2022-46169 · Exploit
• 🔥 https://github.com/thisisveryfunny/CVE-2024-25641-RCE-Automated-Exploit-Cacti-1.2.26 · Exploit
• 🔥 https://github.com/p0dalirius/CVE-2020-8813-Cacti-RCE-in-graph_realtime · Exploit