CVE-2019-20224

HIGH NUCLEI

Pandora FMS 7.0NG - Authenticated OS Command Injection via netflow_get_stats ip_src Parameter

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2019-20224. PoCs published by mhaskar. A Nuclei detection template is also available.

AI-analyzed exploit summary This repository contains a functional Python exploit for CVE-2019-20224, a post-authentication remote code execution vulnerability in Pandora FMS v7.0NG. The exploit leverages a command injection flaw in the 'ip_src' parameter of the netflow live view feature to execute arbitrary commands via a reverse shell.

Description

netflow_get_stats in functions_netflow.php in Pandora FMS 7.0NG allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the ip_src parameter in an index.php?operation/netflow/nf_live_view request. This issue has been fixed in Pandora FMS 7.0 NG 742.

Exploits (1)

nomisec WORKING POC 14 stars
by mhaskar · poc
https://github.com/mhaskar/CVE-2019-20224

This repository contains a functional Python exploit for CVE-2019-20224, a post-authentication remote code execution vulnerability in Pandora FMS v7.0NG. The exploit leverages a command injection flaw in the 'ip_src' parameter of the netflow live view feature to execute arbitrary commands via a reverse shell.

Classification
Working Poc 95%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: Pandora FMS v7.0NG
Auth required
Prerequisites: Valid credentials for Pandora FMS · Network access to the target · Netcat listener for reverse shell
devstral-2 · analyzed Feb 18, 2026 Full analysis →

Nuclei Templates (1)

Pandora FMS 7.0NG - Remote Command Injection
HIGHby ritikchaddha
Shodan: http.title:"pandora fms"
FOFA: title="pandora fms"

References (5)

Core 5
Core References
Exploit, Third Party Advisory x_refsource_misc
https://gist.github.com/mhaskar/2153d66a0928492d76b799ba13b9e3f9
Exploit, Third Party Advisory, VDB Entry x_refsource_misc
http://packetstormsecurity.com/files/155897/Pandora-7.0NG-Remote-Code-Execution.html

Scores

CVSS v3 8.8
EPSS 0.5061
EPSS Percentile 98.8%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-78
Status published
Products (1)
artica/pandora_fms 7.0_ng
Published Jan 09, 2020
Tracked Since Feb 18, 2026