CVE-2018-8735: Command Injection
Published Apr 18, 2018
·Updated
Remote command execution (RCE) vulnerability in Nagios XI 5.2.x through 5.4.x before 5.4.13 allows an attacker to execute arbitrary commands on the target system, aka OS command injection.
Affected Software
1 affected component
Nagios Nagios XI>=5.2.0<5.4.13
Event History
Apr 18, 2018
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·12:29 AM
DescriptionSeverityWeaknessAffected Software
Jul 25, 58461
Event
06:23 PM
Frequently Asked Questions
1
What is the severity of CVE-2018-8735?
CVE-2018-8735 has a high severity rating due to its potential for remote command execution.
2
How do I fix CVE-2018-8735?
To fix CVE-2018-8735, upgrade Nagios XI to version 5.4.13 or later.
3
What versions of Nagios XI are affected by CVE-2018-8735?
CVE-2018-8735 affects Nagios XI versions from 5.2.0 to 5.4.12.
4
Can CVE-2018-8735 lead to data loss?
Yes, exploitation of CVE-2018-8735 can lead to arbitrary command execution, resulting in potential data loss.
5
What types of attacks can exploit CVE-2018-8735?
CVE-2018-8735 can be exploited through OS command injection, allowing attackers to execute arbitrary commands on the target system.