CVE-2020-7058

2020-01-1506:03:56

mitre

www.cve.org

AI Score

8.9

Confidence

High

EPSS

0.005

Percentile

76.1%

JSON

data_input.php in Cacti 1.2.8 allows remote code execution via a crafted Input String to Data Collection -> Data Input Methods -> Unix -> Ping Host. NOTE: the vendor has stated "This is a false alarm.

References

github.com/Cacti/cacti/issues/3186