CVE-2021-37343

EPSS 23.8%

Vexday Risk Score

23Low

SSVC decision (CISA)

Attend

PoC available → attend closely

Exploit maturity

Functional exploit

Automatable exploit available (Nuclei/Metasploit).

CVSS —EPSS 23.8%KEV nãoPoC —Nuclei —Metasploit simPatch —

Lifecycle

15 Jul 2021Metasploit module available

13 Aug 2021Published on NVD

Recommendation: Plan a near-term fix — a public PoC already exists.

A path traversal vulnerability exists in Nagios XI below version 5.8.5 AutoDiscovery component and could lead to post authenticated RCE under security context of the user running Nagios.

Affected products

n/a · n/a

References

http://packetstormsecurity.com/files/165978/Nagios-XI-Autodiscovery-Shell-Upload.html https://www.nagios.com/downloads/nagios-xi/change-log/