PT-2022-11285 · Unknown+2 · Eyesofnetwork+2

Published 2022-06-30 · Updated 2022-07-11 · CVE-2021-40643

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions EyesOfNetwork versions prior to 07-07-2021

Description The issue allows for Remote Code Execution on the mail options configuration page. Specifically, in the location of the sendmail application in the cacti configuration page, it is possible to execute any command when making a test of the configuration, also known as "send test mail". The default location for the sendmail application is /usr/sbin/sendmail.

Recommendations For versions prior to 07-07-2021, consider disabling the sendmail application in the cacti configuration page as a temporary workaround until a patch is available. Restrict access to the mail options configuration page to minimize the risk of exploitation. Avoid using the "send test mail" feature until the issue is resolved.

Fix

Related Identifiers

CVE-2021-40643

Affected Products

Eyesofnetwork

Cacti

Sendmail

References · 6

• https://osv.dev/vulnerability/CVE-2021-40643 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-40643 · Security Note
• https://eyesofnetwork.com/en/news/vulnerabilite-cacti · Vendor Advisory
• https://t.me/cibsecurity/45400 · Telegram Post
• https://eyesofnetwork.com · Note
• https://t.me/cvenotify/32411 · Telegram Post