RCE in Centreon
CVE-2015-1561
The escape_command function in include/Administration/corePerformance/getStats.php in Centreon (formerly Merethis Centreon) 2.5.4 and earlier (fixed in Centreon 19.10.0) uses an incorrect regular expression, which allows remote authenticated users to execute arbitrary commands via shell metacharacters in the ns_id parameter.
Vulnerability class: Command Injection (OS Command Injection)
Published · last modified .
CVSS v2 metric
CVSS v2 base score 6.5 (Medium). Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P. This CVE predates CVSS v3 and has no v3 score from NVD.
EPSS exploit prediction
EPSS: 0.091 (95.2th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 95th percentile — 95.2% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.091 · newest: 0.091 · change: 0.000
Affected products
Weakness classification (CWE)
Public proof-of-concept exploits
References
- packetstormsecurity.com/files/132607/Merethis-Centreon-2.5.4-SQL-Injection-Remo… (Exploit)
- forge.centreon.com/projects/centreon/repository/revisions/387dffdd051dbc7a234e1…
- www.securityfocus.com/archive/1/535961/100/0/threaded (mailing-list)
- github.com/centreon/centreon/commit/a78c60aad6fd5af9b51a6d5de5d65560ea37a98a
Frequently asked questions
- What is CVE-2015-1561?
- CVE-2015-1561 is a vulnerability in Centreon, classified under Command Injection. Published 2015-07-14.
- Is CVE-2015-1561 known to be exploited?
- 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.