CVE-2018-15710

high-risk

Published 2018-11-14

Nagios XI 5.5.6 allows local authenticated attackers to escalate privileges to root via Autodiscover_new.php.

Do I need to act?

78.4% chance of exploitation in next 30 days

EPSS score — higher than 22% of all CVEs

Not on CISA KEV list

No confirmed active exploitation reported to CISA

2 public exploits available

47039, 46221

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 7.8/10 High

LOCAL / LOW complexity

Nagios Xi

Nagios

Exploit https://www.exploit-db.com/exploits/46221/

Exploit https://www.tenable.com/security/research/tra-2018-37

Exploit https://www.exploit-db.com/exploits/46221/

Exploit https://www.tenable.com/security/research/tra-2018-37

/ 100

high-risk

Severity 24/34 · High

Exploitability 27/34 · High

Exposure 5/34 · Minimal