CVE-2023-44092: OS Command Injection

Record summary

CVE-2023-44092 has a selected CVSS score of 7.6 (high).

Description

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Pandora FMS on all allows OS Command Injection. This vulnerability allowed to create a reverse shell and execute commands in the OS. This issue affects Pandora FMS: from 700 through <776.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationNone

AutomatableNo

Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated Mar 20, 2024 · Source: CVE List

Affected products and versions

Product	Source	Version range	Status
Pandora FMS Browse Pandora FMS / Pandora FMS Default status: unaffected	CVE List	700 to ≤ <776	affected
pandora_fms Browse artica / pandora_fms Default status: unknown	CVE List	700 to < 776	affected

References

nvd.nist.gov

https://nvd.nist.gov/vuln/detail/CVE-2023-44092

pandorafms.comVendor advisory

https://pandorafms.com/en/security/common-vulnerabilities-and-exposures