CVE-2017-16660

2017-11-0805:29:00

Google

osv.dev

7.3 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

54.0%

JSON

Cacti 1.1.27 allows remote authenticated administrators to conduct Remote Code Execution attacks by placing the Log Path under the web root, and then making a remote_agent.php request containing PHP code in a Client-ip header.

CPENameOperatorVersion
cactieqrelease/1.1.20
cactieqrelease/1.1.5
cactieqrelease/1.0.6
cactieqrelease/1.1.25
cactieqrelease/1.0.2
cactieqrelease/1.1.16
cactieqrelease/1.0.0
cactieqrelease/1.1.1
cactieqrelease/1.1.14
cactieqrelease/1.0.4

Name	Operator	Version
cacti	eq	release/1.1.20
cacti	eq	release/1.1.5
cacti	eq	release/1.0.6
cacti	eq	release/1.1.25
cacti	eq	release/1.0.2
cacti	eq	release/1.1.16
cacti	eq	release/1.0.0
cacti	eq	release/1.1.1
cacti	eq	release/1.1.14
cacti	eq	release/1.0.4