CVE-2020-7058

data_input.php in Cacti 1.2.8 allows remote code execution via a crafted Input String to Data Collection -> Data Input Methods -> Unix -> Ping Host

published January 15, 2020

CVSS
—
EPSS
2%
Percentile
83.5
In the wild
Unconfirmed
What it is

data_input.php in Cacti 1.2.8 allows remote code execution via a crafted Input String to Data Collection -> Data Input Methods -> Unix -> Ping Host. NOTE: the vendor has stated "This is a false alarm.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02346 · 83.5th percentile
Published
2020-01-15T06:03Z
EPSS history
Timeline
  • 15 JAN 06:03Z
    data_input.php in Cacti 1.2.8 allows remote code execution via a crafted Input String to Data Collection -> Data Input Methods -> Unix -> Ping Host
    cvelistv5