Vulnerabilities/UBUNTU-CVE-2020-7058

UBUNTU-CVE-2020-7058: cacti Ubuntu

SSVC · Estimated by CveMateTrack*Monitor closely. May escalate on new signals. CISA has no entry yet, so CveMate computed this from CVSS and exploit data. It is replaced when CISA publishes.

ExploitationNone (derived)

AutomatableNo (derived)

Technical impactTotal (derived)

Mission & well-beingHigh (assumed)

Source: CveMate estimate, same decision tree as CISA.CISA publishes the first three inputs. Mission & well-being depends on your environment, so it is assumed at its highest: the decision is a worst case.

Published

Published 15-01-2020Last modified 15-01-2020

On this page

Summary Timeline Description CVSS metrics EPSS trend Known exploited Public exploits Weaknesses Affected systems References

Key information

Published15-01-2020

Modified15-01-2020

SourceOSV · Ubuntu

CVSS8.8

EPSSNot scored

KEV0

Exploits0

Vulnerability summary

UBUNTU-CVE-2020-7058 is a high (CVSS 8.8) vulnerability in cacti Ubuntu.

Overall risk

35/100

0100

Medium · default modelHow is this calculated?

SSVC · Estimated by CveMateTrack*Monitor closely. May escalate on new signals. CISA has no entry yet, so CveMate computed this from CVSS and exploit data. It is replaced when CISA publishes.

ExploitationNone (derived)

AutomatableNo (derived)

Technical impactTotal (derived)

Mission & well-beingHigh (assumed)

CVSS score

8.8/10

010

High · v3.1 (OSV · Ubuntu), selected by version preference

EPSS scoreNot scoredRisk metrics not yet published.

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits0No public exploits recorded

Timeline

15-01-2020
PublishedVulnerability first disclosed.

Description

** DISPUTED ** data_input.php in Cacti 1.2.8 allows remote code execution via a crafted Input String to Data Collection -> Data Input Methods -> Unix -> Ping Host. NOTE: the vendor has stated "This is a false alarm."

CVSS metrics

1 score · 1 source · 1 version

v3.18.8

High 8.8Preferred score · OSV · Ubuntu (Ecosystem advisory) · calculated from vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

SourcesSingle source

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Ubuntu1 product

cactiAll versions (No fix recorded)

1 vendor · 1 product

References

4 links

ubuntu.com/security/CVE-2020-7058REPORT
github.com/Cacti/cacti/issues/3186REPORT
github.com/Cacti/cacti/issues/3186REPORT
www.cve.org/CVERecord?id=CVE-2020-7058REPORT

Related vulnerabilities