CVE-2021-25298

Related Files

Nagios XI 5.7.5 Remote Code Execution

Posted Feb 8, 2023

Authored by Matthew Mathur | Site metasploit.com

This Metasploit module exploits CVE-2021-25296, CVE-2021-25297, and CVE-2021-25298, which are OS command injection vulnerabilities in the windowswmi, switch, and cloud-vm configuration wizards that allow an authenticated user to perform remote code execution on Nagios XI versions 5.5.6 to 5.7.5 as the apache user. Valid credentials for a Nagios XI user are required. This module has been successfully tested against official NagiosXI OVAs versions 5.5.6 through 5.7.5.

tags | exploit, remote, vulnerability, code execution

advisories | CVE-2021-25296, CVE-2021-25297, CVE-2021-25298

SHA-256 | e1e14a22eb63b8baf6d8bc7b7a7a42d07a444dd4ad650863cfe3c7cce4239771

Download | Favorite | View

Nagios XI 5.7.5 Remote Code Execution

Posted Feb 26, 2021

Authored by fs0c-sh | Site github.com

Nagios XI version 5.7.5 suffers from a cross site scripting and multiple remote code execution vulnerabilities.

tags | exploit, remote, code execution

advisories | CVE-2021-25296, CVE-2021-25297, CVE-2021-25298, CVE-2021-25299

SHA-256 | 1c4f0a48f176dfe70f8a573c15bf859e525e542de8476de9e2f2e8911e7b671f

Download | Favorite | View