CVE-2024-43363
Last modified
CVE-2024-43363 is a high-severity vulnerability rated 7.2/10 on the CVSS scale. Cacti is an open source performance and fault management framework. An admin user can create a device with a malicious hostname containing php code and repeat the installation process (completing only step 5 of the installation process is enough, no need to complete the steps before or after it) to use a php file as the cacti log file. EPSS estimates a 35.81% chance of exploitation in the next 30 days.
Description
Cacti is an open source performance and fault management framework. An admin user can create a device with a malicious hostname containing php code and repeat the installation process (completing only step 5 of the installation process is enough, no need to complete the steps before or after it) to use a php file as the cacti log file. After having the malicious hostname end up in the logs (log poisoning), one can simply go to the log file url to execute commands to achieve RCE. This issue has been addressed in version 1.2.28 and all users are advised to upgrade. There are no known workarounds for this vulnerability.
Metrics
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Cacti | Cacti | < 1.2.28 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2024-43363?
How severe is CVE-2024-43363?
How do I fix CVE-2024-43363?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2024
- CVE-2024-43357ECMA-262 is the language specification for the scripting lan…8.6
- CVE-2024-43358ZoneMinder is a free, open source closed-circuit television …6.1
- CVE-2024-43359ZoneMinder is a free, open source closed-circuit television …6.1
- CVE-2024-4336Adive Framework 2.0.8, does not sufficiently encode user-con…7.4
- CVE-2024-43360ZoneMinder is a free, open source closed-circuit television …9.8
- CVE-2024-43362Cacti is an open source performance and fault management fra…5.4
- CVE-2024-43364Cacti is an open source performance and fault management fra…8.2
- CVE-2024-43365Cacti is an open source performance and fault management fra…8.2
- CVE-2024-43366zkvyper is a Vyper compiler. Starting in version 1.3.12 and …9.1
- CVE-2024-43367Boa is an embeddable and experimental Javascript engine writ…7.5
- CVE-2024-43368The Trix editor, versions prior to 2.1.4, is vulnerable to X…6.5
- CVE-2024-43369Ibexa RichText Field Type is a Field Type for supporting ric…7.2
Are you affected by CVE-2024-43363?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST