CVE-2018-15708

high-risk

Published 2018-11-14

Snoopy 1.0 in Nagios XI 5.5.6 allows remote unauthenticated attackers to execute arbitrary commands via a crafted HTTP request.

Do I need to act?

91.5% chance of exploitation in next 30 days

EPSS score — higher than 9% of all CVEs

Not on CISA KEV list

No confirmed active exploitation reported to CISA

2 public exploits available

47039, 46221

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 9.8/10 Critical

NETWORK / LOW complexity

Nagios Xi

Nagios

Exploit https://www.exploit-db.com/exploits/46221/

Exploit https://www.tenable.com/security/research/tra-2018-37

Exploit https://www.exploit-db.com/exploits/46221/

Exploit https://www.tenable.com/security/research/tra-2018-37

/ 100

high-risk

Severity 32/34 · Critical

Exploitability 27/34 · High

Exposure 5/34 · Minimal