CVE-2023-49085

Deeper analysis

Cacti is an operational monitoring and fault management framework that is affected by a SQL injection vulnerability in versions 1.2.25 and earlier. The flaw exists in the pollers.php script and stems from insufficient input sanitization, enabling an authenticated user to inject and execute arbitrary SQL statements, as classified under CWE-89. The issue carries a CVSS 3.1 score of 8.8.

An authorized user with access to the affected script can supply crafted input to pollers.php and achieve arbitrary SQL execution on the underlying database. Public references indicate this can be escalated to remote code execution in practice.

The GitHub security advisory GHSA-vr3c-38wh-g855 and subsequent distribution notices from Debian and Fedora reference the issue, though the original disclosure stated that no patch was available at the time of publication. A proof-of-concept exploit demonstrating remote code execution has been published on Packet Storm.

The associated EPSS score reached a peak of 0.9140 and remains at that level, indicating sustained exploitation interest following disclosure.