CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-10669

An issue was discovered in LibreNMS through 1.47. There is a command injection vulnerability in html/includes/graphs/device/collectd.inc.php where user supplied parameters are filtered with the mysqli_escape_real_string function. This function is not the appropriate function to sanitize command arguments as it does not escape a number of command line syntax characters such as ` (backtick), allowing an attacker to inject commands into the variable $rrd_cmd, which gets executed via passthru().

Exploit prediction scoring system (EPSS) score

EPSS Score 0.537

EPSS Ranking 97.9%

CVSS Severity

CVSS v3 Score 7.2

CVSS v2 Score 6.5

References

Products affected by CVE-2019-10669

Librenms » Librenms » Version: N/A

cpe:2.3:a:librenms:librenms:-
Librenms » Librenms » Version: 0.1

cpe:2.3:a:librenms:librenms:0.1
Librenms » Librenms » Version: 1.19

cpe:2.3:a:librenms:librenms:1.19
Librenms » Librenms » Version: 1.20

cpe:2.3:a:librenms:librenms:1.20
Librenms » Librenms » Version: 1.20.1

cpe:2.3:a:librenms:librenms:1.20.1
Librenms » Librenms » Version: 1.21

cpe:2.3:a:librenms:librenms:1.21
Librenms » Librenms » Version: 1.22

cpe:2.3:a:librenms:librenms:1.22
Librenms » Librenms » Version: 1.22.01

cpe:2.3:a:librenms:librenms:1.22.01
Librenms » Librenms » Version: 1.23

cpe:2.3:a:librenms:librenms:1.23
Librenms » Librenms » Version: 1.24

cpe:2.3:a:librenms:librenms:1.24
Librenms » Librenms » Version: 1.25

cpe:2.3:a:librenms:librenms:1.25
Librenms » Librenms » Version: 1.26

cpe:2.3:a:librenms:librenms:1.26
Librenms » Librenms » Version: 1.27

cpe:2.3:a:librenms:librenms:1.27
Librenms » Librenms » Version: 1.28

cpe:2.3:a:librenms:librenms:1.28
Librenms » Librenms » Version: 1.29

cpe:2.3:a:librenms:librenms:1.29
Librenms » Librenms » Version: 1.30

cpe:2.3:a:librenms:librenms:1.30
Librenms » Librenms » Version: 1.30.01

cpe:2.3:a:librenms:librenms:1.30.01
Librenms » Librenms » Version: 1.31

cpe:2.3:a:librenms:librenms:1.31
Librenms » Librenms » Version: 1.31.01

cpe:2.3:a:librenms:librenms:1.31.01
Librenms » Librenms » Version: 1.31.02

cpe:2.3:a:librenms:librenms:1.31.02
Librenms » Librenms » Version: 1.31.03

cpe:2.3:a:librenms:librenms:1.31.03
Librenms » Librenms » Version: 1.32

cpe:2.3:a:librenms:librenms:1.32
Librenms » Librenms » Version: 1.32.01

cpe:2.3:a:librenms:librenms:1.32.01
Librenms » Librenms » Version: 1.33

cpe:2.3:a:librenms:librenms:1.33
Librenms » Librenms » Version: 1.33.01

cpe:2.3:a:librenms:librenms:1.33.01
Librenms » Librenms » Version: 1.34

cpe:2.3:a:librenms:librenms:1.34
Librenms » Librenms » Version: 1.35

cpe:2.3:a:librenms:librenms:1.35
Librenms » Librenms » Version: 1.36

cpe:2.3:a:librenms:librenms:1.36
Librenms » Librenms » Version: 1.36.01

cpe:2.3:a:librenms:librenms:1.36.01
Librenms » Librenms » Version: 1.37

cpe:2.3:a:librenms:librenms:1.37
Librenms » Librenms » Version: 1.38

cpe:2.3:a:librenms:librenms:1.38
Librenms » Librenms » Version: 1.39

cpe:2.3:a:librenms:librenms:1.39
Librenms » Librenms » Version: 1.40

cpe:2.3:a:librenms:librenms:1.40
Librenms » Librenms » Version: 1.41

cpe:2.3:a:librenms:librenms:1.41
Librenms » Librenms » Version: 1.42

cpe:2.3:a:librenms:librenms:1.42
Librenms » Librenms » Version: 1.42.01

cpe:2.3:a:librenms:librenms:1.42.01
Librenms » Librenms » Version: 1.43

cpe:2.3:a:librenms:librenms:1.43
Librenms » Librenms » Version: 1.44

cpe:2.3:a:librenms:librenms:1.44
Librenms » Librenms » Version: 1.45

cpe:2.3:a:librenms:librenms:1.45
Librenms » Librenms » Version: 1.46

cpe:2.3:a:librenms:librenms:1.46
Librenms » Librenms » Version: 1.47

cpe:2.3:a:librenms:librenms:1.47

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-10669

Products

Pricing

Contact Us