CVE-2021-37344: OS Command Injection
First published: Fri Aug 13 2021(Updated: )
Nagios XI Switch Wizard before version 2.5.7 is vulnerable to remote code execution through improper neutralisation of special elements used in an OS Command (OS Command injection).
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Nagios Nagios Xi Switch Wizard | <2.5.7 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this Nagios XI Switch Wizard vulnerability?
The vulnerability ID for this Nagios XI Switch Wizard vulnerability is CVE-2021-37344.
What is the title of this Nagios XI Switch Wizard vulnerability?
The title of this Nagios XI Switch Wizard vulnerability is 'Nagios XI Switch Wizard before version 2.5.7 is vulnerable to remote code execution through improper neutralisation of special elements used in an OS Command (OS Command injection).'
How can this vulnerability be exploited?
This vulnerability can be exploited through improper neutralization of special elements used in an OS Command, leading to remote code execution.
What is the severity of CVE-2021-37344?
The severity of CVE-2021-37344 is classified as critical with a CVSS score of 9.8.
How do I fix the Nagios XI Switch Wizard vulnerability?
To fix the Nagios XI Switch Wizard vulnerability, upgrade to version 2.5.7 or a later version.
- collector/nvd-index
- agent/severity
- agent/references
- agent/author
- agent/type
- agent/weakness
- agent/description
- agent/tags
- agent/event
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- vendor/nagios
- canonical/nagios nagios xi switch wizard