CVE-2017-16641: OS Command Injection
Published Nov 7, 2017
·Updated
lib/rrd.php in Cacti 1.1.27 allows remote authenticated administrators to execute arbitrary OS commands via the pathrrdtool parameter in an action=save request to settings.php.
Affected Software
1 affected component
Cacti Cacti=1.1.27
Remediation
Patch Available
Event History
Nov 7, 2017
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-16641?
CVE-2017-16641 has a high severity due to its potential for arbitrary OS command execution.
2
How do I fix CVE-2017-16641?
To fix CVE-2017-16641, upgrade Cacti to version 1.1.28 or later.
3
What are the potential impacts of CVE-2017-16641?
The potential impacts of CVE-2017-16641 include unauthorized access and control over the system by executing arbitrary commands.
4
Who is affected by CVE-2017-16641?
CVE-2017-16641 affects users of Cacti version 1.1.27 who have remote administrator access.
5
What kind of software vulnerability is CVE-2017-16641?
CVE-2017-16641 is a remote command execution vulnerability in the Cacti software.