CVE-2017-16660

Cacti 1.1.27 allows remote authenticated administrators to conduct Remote Code Execution attacks by placing the Log Path under the web root, and then making a…

published November 8, 2017

CVSS
—
EPSS
4%
Percentile
90.9
In the wild
Unconfirmed
What it is

Cacti 1.1.27 allows remote authenticated administrators to conduct Remote Code Execution attacks by placing the Log Path under the web root, and then making a remote_agent.php request containing PHP code in a Client-ip header.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04246 · 90.9th percentile
Published
2017-11-08T05:00Z
EPSS history
Timeline
  • 08 NOV 05:00Z
    Cacti 1.1.27 allows remote authenticated administrators to conduct Remote Code Execution attacks by placing the Log Path under the web root, and then making a…
    cvelistv5