PT-2021-21613 · Nagios Xi · Nagios Xi

Published 2021-08-13 · Updated 2022-02-22 · CVE-2021-37343

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Nagios XI versions prior to 5.8.5

Description A path traversal vulnerability exists in the AutoDiscovery component of Nagios XI, which could lead to post-authenticated remote code execution (RCE) under the security context of the user running Nagios.

Recommendations For versions prior to 5.8.5, update to version 5.8.5 or later to resolve the issue. As a temporary workaround, consider restricting access to the AutoDiscovery component until a patch is applied.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2021-37343

Affected Products

Nagios Xi

References · 9

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/nagios_xi_scanner.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/nagios_xi_autodiscovery_webshell.rb · Exploit
• 🔥 http://packetstormsecurity.com/files/165978/Nagios-XI-Autodiscovery-Shell-Upload.html · Exploit
• https://osv.dev/vulnerability/CVE-2021-37343 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-37343 · Security Note
• https://nagios.com/downloads/nagios-xi/change-log · Vendor Advisory
• https://t.me/cvenotify/19282 · Telegram Post
• https://t.me/cvenotify/19898 · Telegram Post
• https://t.me/cibsecurity/27296 · Telegram Post