LibreNMS arbitrary OS commands execution

KRITISCH 9.8CVE-2018-20434 · GHSA-62q7-qj6g-gvr7 · Published 24/04/2019 · updated 17/06/2026

Package	Affected versions	Patched versions
librenms/librenms Packagist	`= 1.46`	No fix yet
librenms librenms	`= 1.46`	No fix yet

Description

LibreNMS 1.46 allows remote attackers to execute arbitrary OS commands by using the $_POST['community'] parameter to html/pages/addhost.inc.php during creation of a new device, and then making a /ajax_output.php?id=capture&format=text&type=snmpwalk&hostname=localhost request that triggers html/includes/output/capture.inc.php command mishandling.

NVD description

LibreNMS 1.46 allows remote attackers to execute arbitrary OS commands by using the $_POST['community'] parameter to html/pages/addhost.inc.php during creation of a new device, and then making a /ajax_output.php?id=capture&format=text&type=snmpwalk&hostname=localhost request that triggers html/includes/output/capture.inc.php command mishandling.

References

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free