PT-2025-44506 · Nagios Enterprises · Nagios Xi

Leo Trinh · Published 2025-10-30 · Updated 2025-10-31 · CVE-2024-14008

Positive Technologies (AI Summary)

CVSS v4.0

9.4

Critical

Base vector

AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Name of the Vulnerable Software and Affected Versions Nagios XI versions prior to 2024R1.3.2

Description Nagios XI is affected by a remote command execution issue in the WinRM Configuration Wizard. A lack of proper input validation allows an authenticated administrator to inject shell metacharacters into backend command invocations. Successful exploitation can lead to arbitrary command execution with the privileges of the Nagios XI web application user. The vulnerable component is the WinRM Configuration Wizard. The issue involves insufficient validation of user-supplied input.

Recommendations Update Nagios XI to version 2024R1.3.2 or later.

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

BDU:2025-14306

CVE-2024-14008

Affected Products

Nagios Xi

References · 9

• https://bdu.fstec.ru/vul/2025-14306 · Security Note
• https://osv.dev/vulnerability/CVE-2024-14008 · Vendor Advisory
• https://nagios.com/changelog/nagios-xi · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2024-14008 · Security Note
• https://nagios.com/products/security/#nagios-xi · Patch, Vendor Advisory
• https://dbugs.ptsecurity.com/vulnerability/PT-2025-44506?fts[value]=CVE-2024-14008 · Note
• https://vulncheck.com/advisories/nagios-xi-rce-via-winrm-configuration-wizard · Note
• https://twitter.com/VulmonFeeds/status/1984116721460941115 · Twitter Post
• https://twitter.com/CVEnew/status/1984015861493965013 · Twitter Post