PT-2023-8525 · Cacti+1 · Cacti+1

012Git012 · Published 2023-12-22 · Updated 2025-01-24 · CVE-2023-49085

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cacti versions 1.2.25 and prior

Description The issue is related to a lack of protection in the SQL query structure of the Cacti network monitoring tool, specifically in the pollers.php script. This allows an authorized user to execute arbitrary SQL code, potentially leading to the execution of arbitrary code by a remote attacker. The vulnerable component is the pollers.php script. The impact of this issue is the execution of arbitrary SQL code.

Recommendations For versions 1.2.25 and prior, consider disabling the pollers.php script as a temporary workaround until a patch is available. Restrict access to the pollers.php script to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

ALT-PU-2023-8407

ALT-PU-2024-1003

ALT-PU-2024-7120

ALT-PU-2025-1813

BDU:2024-01113

CVE-2023-49085

DLA-3765-1

DSA-5646-1

GHSA-VR3C-38WH-G855

OPENSUSE-SU-2024:0031-1

OPENSUSE-SU-2024:13533-1

Affected Products

Alt Linux

Cacti

References · 39

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/cacti_pollers_sqli_rce.rb · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/49xxx/CVE-2023-49085.json · Exploit
• 🔥 https://github.com/Cacti/cacti/blob/5f6f65c215d663a775950b2d9db35edbaf07d680/pollers.php#L451 · Exploit
• 🔥 https://github.com/Cacti/cacti/security/advisories/GHSA-vr3c-38wh-g855 · Exploit
• https://ubuntu.com/security/CVE-2023-49085 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-49085 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-49085 · Security Note
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/RBEOAFKRARQHTDIYSL723XAFJ2Q6624X · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-49085 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-49085 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:13533-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-49085 · Security Note
• https://osv.dev/vulnerability/DSA-5646-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:0031-1 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-3765-1 · Vendor Advisory