CVE-2024-14003: Nagios XI < 2024R1.2 RCE via NRDP Server Plugins
Nagios XI versions prior to 2024R1.2 are vulnerable to remote code execution (RCE) through its NRDP (Nagios Remote Data Processor) server plugins. Insufficient validation of inbound NRDP request parameters allows crafted input to reach command execution paths, enabling attackers to execute arbitrary commands on the underlying host in the context of the web/Nagios service.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-14003?
CVE-2024-14003 is classified as a high-severity vulnerability due to its potential for remote code execution.
How do I fix CVE-2024-14003?
To mitigate CVE-2024-14003, upgrade Nagios XI to version 2024R1.2 or later.
What versions of Nagios XI are affected by CVE-2024-14003?
CVE-2024-14003 affects all Nagios XI versions prior to 2024R1.2.
What is the impact of CVE-2024-14003?
The impact of CVE-2024-14003 allows attackers to execute arbitrary code on the server through malformed NRDP requests.
Is there a workaround for CVE-2024-14003?
There are no official workarounds for CVE-2024-14003; updating to the latest version is the recommended action.