PT-2025-1299 · Cacti+1 · Cacti+1

U32I · Published 2025-01-26 · Updated 2026-03-09 · CVE-2025-22604

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Cacti versions prior to 1.2.29 Cacti versions prior to 1.2.24+ds1-1+deb12u5 Cacti versions prior to 1.2.16+ds1-2+deb11u5

Description Cacti, a web interface for graphing of monitoring systems, contains a critical flaw in its multi-line SNMP result parser. This allows authenticated users to inject malformed Object Identifier (OID) values in SNMP responses. When processed by the ss net snmp disk io() or ss net snmp disk bytes() functions, a portion of each OID is used as a key in an array that is then used as part of a system command, leading to remote code execution. Approximately 179,000 instances of Cacti are discoverable online.

Recommendations Upgrade to Cacti version 1.2.29 or later. Upgrade to Cacti version 1.2.24+ds1-1+deb12u5 or later. Upgrade to Cacti version 1.2.16+ds1-2+deb11u5 or later.

Exploit

Fix

RCE

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

ALT-PU-2025-3834

ALT-PU-2025-5333

BDU:2025-00856

CVE-2025-22604

DLA-4048-1

DSA-5862-1

GHSA-C5J8-JXJ3-HH36

Affected Products

Alt Linux

Cacti

References · 75

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/22xxx/CVE-2025-22604.json · Exploit
• https://github.com/Cacti/cacti/security/advisories/GHSA-c5j8-jxj3-hh36 · Vendor Advisory
• https://github.com/Cacti/cacti/commit/c7e4ee798d263a3209ae6e7ba182c7b65284d8f0 · Patch
• https://bdu.fstec.ru/vul/2025-00856 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-22604 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-22604 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-22604 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-22604 · Security Note
• https://ubuntu.com/security/CVE-2025-22604 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-5862-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-22604 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-22604 · Security Note
• https://osv.dev/vulnerability/DLA-4048-1 · Vendor Advisory
• https://twitter.com/wvipersg/status/1884555300889305298 · Twitter Post
• https://twitter.com/techpio_team/status/1884854055094128723 · Twitter Post