Paper/Archive/CVE-2024-14003

CVE-2024-14003

Nagios XI — Nagios XI < 2024R1.2 RCE via NRDP Server Plugins

CVSS 9.8 (NVD)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 83.2.832 × 2016.6 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

Nagios XI versions prior to 2024R1.2 are vulnerable to remote code execution (RCE) through its NRDP (Nagios Remote Data Processor) server plugins. Insufficient validation of inbound NRDP request parameters allows crafted input to reach command execution paths, enabling attackers to execute arbitrary commands on the underlying host in the context of the web/Nagios service.

Affected

ProductAffectedFixed inSource

XI< 2024R1.22024R1.2CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

VulnCheck (CNA)9.4CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

patchnagios.com/products/security/#nagios-xi patchnagios.com/changelog/nagios-xi writeupvulncheck.com/advisories/nagios-xi-rce-via-nrdp-server-plugins