PT-2023-5422 · Cacti+1 · Cacti+1

M3Ssap0 · Published 2023-09-05 · Updated 2025-01-24 · CVE-2023-39362

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cacti version 1.2.24

Description The issue is related to insufficient validation of arguments passed to a command in the lib/snmp.php file, allowing an authenticated privileged user to perform command injection and obtain remote code execution on the underlying server under certain conditions. The lib/snmp.php file has a set of functions that accept input variables and place them into an exec call without proper escape or validation.

Recommendations For Cacti version 1.2.24, upgrade to version 1.2.25 to address the issue. As a temporary workaround, consider restricting access to the lib/snmp.php file or disabling the vulnerable functions until a patch is available. Avoid using malicious strings in the SNMP options of a Device to minimize the risk of exploitation.

Exploit

Fix

RCE

OS Command Injection

Command Injection

Weakness Enumeration

CWE-78

CWE-77

Related Identifiers

ALT-PU-2023-7619

ALT-PU-2023-7621

ALT-PU-2024-7120

ALT-PU-2025-1813

BDU:2023-06052

CVE-2023-39362

DLA-3765-1

DSA-5550-1

GHSA-G6FF-58CJ-X3CP

OPENSUSE-SU-2023:0275-1

OPENSUSE-SU-2024:13203-1

Affected Products

Alt Linux

Cacti

References · 63

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/39xxx/CVE-2023-39362.json · Exploit
• 🔥 https://github.com/Cacti/cacti/security/advisories/GHSA-g6ff-58cj-x3cp · Exploit
• 🔥 https://exploit-db.com/exploits/51740 · Exploit
• 🔥 http://packetstormsecurity.com/files/175029/Cacti-1.2.24-Command-Injection.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-39362 · Security Note
• https://osv.dev/vulnerability/DSA-5550-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2023:0275-1 · Vendor Advisory
• https://debian.org/security/2023/dsa-5550 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-39362 · Security Note
• https://ubuntu.com/security/CVE-2023-39362 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:13203-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-39362 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/WOQFYGLZBAWT4AWNMO7DU73QXWPXTCKH · Vendor Advisory
• https://osv.dev/vulnerability/DLA-3765-1 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/CFH3J2WVBKY4ZJNMARVOWJQK6PSLPHFH · Vendor Advisory