CVE-2020-5792

EPSS 61.0%

Vexday Risk Score

30Bajo

Decisión SSVC (CISA)

Attend

PoC disponible → seguir de cerca

Madurez del exploit

Exploit funcional

Exploit automatizable disponible (Nuclei/Metasploit).

CVSS —EPSS 61.0%KEV nãoPoC —Nuclei —Metasploit simPatch —

Ciclo de vida

20 oct 2020Exploit Metasploit disponible

20 oct 2020Publicada en NVD

Recomendación: Planificar corrección próxima — ya existe PoC pública.

Improper neutralization of argument delimiters in a command in Nagios XI 5.7.3 allows a remote, authenticated admin user to write to arbitrary files and ultimately execute code with the privileges of the apache user.

Productos afectados

n/a · Nagios XI

Referencias

http://packetstormsecurity.com/files/162284/Nagios-XI-5.7.3-Remote-Code-Execution.html https://www.tenable.com/security/research/tra-2020-58