Critical · published December 5, 2022
CVSS calls it critical at 9.8. It is confirmed in active exploitation. It sits in the 100.0th percentile for exploit probability.
🚨 An unauthenticated user can command Cacti to execute arbitrary code with just a simple request! 🔥 Think of it like a restaurant where anyone can place a phone order without having to show ID. If the chef blindly makes every dish on the menu, a clever caller could order a secret recipe that causes chaos in the kitchen! This vulnerability could allow a malicious user to run any command on your server, potentially leading to total control over critical systems. Imagine someone taking over your monitoring system, stealing sensitive data, or even crashing your entire setup — it's absolutely devastating!
Think of it like a restaurant where anyone can place a phone order without having to show ID. If the chef blindly makes every dish on the menu, a clever caller could order a secret recipe that causes chaos in the kitchen! CVE-2022-46169 is a command injection vulnerability in Cacti's `remote_agent.php`, which allows attackers to bypass authentication and run arbitrary commands through a crafted request. It exploits the `get_client_addr` function by manipulating `$_SERVER` variables, enabling unauthorized access to execute PHP scripts.
This vulnerability could allow a malicious user to run any command on your server, potentially leading to total control over critical systems. Imagine someone taking over your monitoring system, stealing sensitive data, or even crashing your entire setup — it's absolutely devastating! To secure your Cacti installation, upgrade to version 1.2.23 or later immediately. Additionally, ensure that the `get_client_addr` function does not accept arbitrary IP addresses from `HTTP_` variables, tightening control over client identification. Don't delay in implementing these changes to protect your system! You've got this! Follow these steps to fortify your Cacti installation and keep your operations secure. 🛡️