CVE-2019-10669 Command injection in n/a
Attackers can execute arbitrary commands on the server via improper input sanitization in LibreNMS collectd graph generation.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2019-10669?
CVE-2019-10669 is a high-severity command injection vulnerability in Librenms Librenms, published on 9 Sep 2019. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
An issue was discovered in LibreNMS through 1.47. There is a command injection vulnerability in html/includes/graphs/device/collectd.inc.php where user supplied parameters are filtered with the mysqli_escape_real_string function. This function is not the appropriate function to sanitize command arguments as it does not escape a number of command line syntax characters such as ` (backtick), allowing an attacker to inject commands into the variable $rrd_cmd, which gets executed via passthru().
Weakness: CWE-78
Which versions are affected by CVE-2019-10669?
It affects 1 product.
Products include Librenms Librenms.
How do I fix CVE-2019-10669?
No fix has been published for CVE-2019-10669 yet. Limit exposure of the affected software until one is available.
Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.
Is CVE-2019-10669 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2019-10669 exists.
Public exploit code: 1 Metasploit module and 2 Exploit-DB entries.
Other vulnerabilities in Librenms Librenms
Sources
Also known as GHSA-rxqm-5773-c9g6.