CVE-2021-37346: Command Injection
Published Aug 13, 2021
·Updated
Nagios XI WatchGuard Wizard before version 1.4.8 is vulnerable to remote code execution through Improper neutralisation of special elements used in an OS Command (OS Command injection).
Affected Software
1 affected component
Nagios Nagios XI WatchGuard Wizard<1.4.8
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Nagios XI WatchGuard Wizardto a version that resolves this vulnerability.Fixed in 1.4.8
Event History
Aug 13, 2021
CVE Published
via MITRE·11:30 AM
Data Sourced
via MITRE·11:30 AM
Description
Data Sourced
via NVD·12:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID for Nagios XI WatchGuard Wizard?
The vulnerability ID for Nagios XI WatchGuard Wizard is CVE-2021-37346.
2
What is the severity of CVE-2021-37346?
The severity of CVE-2021-37346 is critical.
3
What is the affected software version of Nagios XI WatchGuard Wizard?
The affected software version of Nagios XI WatchGuard Wizard is up to version 1.4.8.
4
What is the risk associated with CVE-2021-37346?
The risk associated with CVE-2021-37346 is remote code execution through OS Command injection.
5
How can I fix CVE-2021-37346?
To fix CVE-2021-37346, update Nagios XI WatchGuard Wizard to version 1.4.8 or later.