CVE-2024-14008: Nagios XI < 2024R1.3.2 RCE via WinRM Configuration Wizard
Nagios XI versions prior to 2024R1.3.2 contain a remote command execution vulnerability in the WinRM Configuration Wizard. Insufficient validation of user-supplied input allows an authenticated administrator to inject shell metacharacters that are incorporated into backend command invocations. Successful exploitation enables arbitrary command execution with the privileges of the Nagios XI web application user.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Nagios XIto a version that resolves this vulnerability.Fixed in 2024R1.3.2
Event History
Frequently Asked Questions
What is the severity of CVE-2024-14008?
CVE-2024-14008 is classified as a high-severity remote command execution vulnerability.
How do I fix CVE-2024-14008?
To fix CVE-2024-14008, upgrade Nagios XI to version 2024R1.3.2 or later.
Who is affected by CVE-2024-14008?
CVE-2024-14008 affects Nagios XI versions prior to 2024R1.3.2.
What can an attacker do with CVE-2024-14008?
An attacker can exploit CVE-2024-14008 to execute arbitrary commands on the server through the WinRM Configuration Wizard.
Is user authentication required to exploit CVE-2024-14008?
Yes, exploitation of CVE-2024-14008 requires authenticated administrator access to Nagios XI.