What is CVE-2021-3193?

CVE-2021-3193 is a critical-severity vulnerability in Nagios Nagios_xi. CVSS score: 9.8/10. Published 2021-01-26.

How severe is CVE-2021-3193?

Critical severity. CVSS v3 base score is 9.8 out of 10.

Vulnerability in Nagios Nagios_xi

CVE-2021-3193

Improper access and command validation in the Nagios Docker Config Wizard before 1.1.2, as used in Nagios XI through 5.7, allows an unauthenticated attacker to execute remote code as the apache user.

EPSS: 0.098 (94.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Nagios Nagios_xi
N/a — versions n/a

References

cve@mitre.org (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2021-3193?: CVE-2021-3193 is a critical-severity vulnerability in Nagios Nagios_xi. CVSS score: 9.8/10. Published 2021-01-26.
How severe is CVE-2021-3193?: Critical severity. CVSS v3 base score is 9.8 out of 10.