CVE-2023-28354

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-28354
An issue was discovered in Opsview Monitor Agent 6.8. An unauthenticated remote attacker can call check_nrpe against affected targets, specifying known NRPE plugins, which in default installations are configured to accept command control characters and pass them to command-line interpreters for NRPE plugin execution. This allows the attacker to escape NRPE plugin execution and execute commands remotely on the target as NT_AUTHORITY\SYSTEM.

9.8 /10

CVSS v3 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://github.com/stormfleet/CVE-2023-28354/blob/main/README.md
Configurations

No configuration.

History

10 Jan 2025, 18:15

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 9.8
CWE CWE-94
Summary
  • (es) Se descubrió un problema en Opsview Monitor Agent 6.8. Un atacante remoto no autenticado puede llamar a check_nrpe contra los objetivos afectados, especificando complementos NRPE conocidos, que en las instalaciones predeterminadas están configurados para aceptar caracteres de control de comandos y pasarlos a los intérpretes de línea de comandos para la ejecución del complemento NRPE. Esto permite al atacante escapar de la ejecución del complemento NRPE y ejecutar comandos de forma remota en el objetivo como NT_AUTHORITY\SYSTEM.

09 Jan 2025, 22:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-01-09 22:15

Updated : 2025-01-10 18:15

NVD link : CVE-2023-28354

Mitre link : CVE-2023-28354

CVE.ORG link : CVE-2023-28354

JSON object : View

Products Affected

No product.

CWE
CWE-94

Improper Control of Generation of Code ('Code Injection')