CVE-2018-20434
CRITICALLibreNMS 1.46 - OS Command Injection via $_POST['community'] Parameter
Title source: llmExploitation Summary
EIP tracks 4 public exploits for CVE-2018-20434.
PoCs published by Askar, Metasploit, mhaskar, including Metasploit module exploits/linux/http/librenms_addhost_cmd_inject.
AI-analyzed exploit summary This exploit leverages an authenticated RCE vulnerability in LibreNMS v1.46 by injecting a reverse shell payload into the SNMP community field during device creation. The payload is executed when the application processes the SNMP walk request.
Description
LibreNMS 1.46 allows remote attackers to execute arbitrary OS commands by using the $_POST['community'] parameter to html/pages/addhost.inc.php during creation of a new device, and then making a /ajax_output.php?id=capture&format=text&type=snmpwalk&hostname=localhost request that triggers html/includes/output/capture.inc.php command mishandling.
Exploits (4)
This exploit leverages an authenticated RCE vulnerability in LibreNMS v1.46 by injecting a reverse shell payload into the SNMP community field during device creation. The payload is executed when the application processes the SNMP walk request.
This Metasploit module exploits a command injection vulnerability in LibreNMS by injecting arbitrary commands via the unsanitized 'community' parameter in the addhost functionality. It authenticates, adds a device with a malicious payload, triggers the payload, and cleans up by deleting the device.
This exploit leverages an authenticated RCE vulnerability in LibreNMS v1.46 by injecting a reverse shell payload into the SNMP community field during device creation. The payload is executed when the application processes the device via an AJAX request.
This Metasploit module exploits a command injection vulnerability in LibreNMS by injecting arbitrary commands via the 'community' parameter in the addhost functionality. It authenticates, adds a device with a malicious payload, triggers the payload execution, and cleans up by deleting the device.
References (5)
Scores
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H