High severity · published Nov 21, 2019
CVE-2019-16405
Centreon Web before 2.8.30, 18.10.x before 18.10.8, 19.04.x before 19.04.5 and 19.10.x before 19.10.2 allows Remote Code Execution by an administrator who can modify Macro…
7.2
CVSS
27%
EPSS
No
On KEV
Description
Centreon Web before 2.8.30, 18.10.x before 18.10.8, 19.04.x before 19.04.5 and 19.10.x before 19.10.2 allows Remote Code Execution by an administrator who can modify Macro Expression location settings. CVE-2019-16405 and CVE-2019-17501 are similar to one another and may be the same.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)27.0% · higher than 98% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CW
Centreon Web · Centreon
before 2.8.30; 18.10.0 before 18.10.8; 19.04.0 before 19.04.5; 19.10.0 before 19.10.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2019-16405
CVE.org
https://www.cve.org/CVERecord?id=CVE-2019-16405
Exploit
http://packetstormsecurity.com/files/155999/Centreon-19.04-Remote-Code-Execution.html
Release Notes
https://documentation.centreon.com/docs/centreon/en/latest/release_notes/centreon-18.10.html
Release Notes
https://documentation.centreon.com/docs/centreon/en/latest/release_notes/centreon-19.04.html
Release Notes
https://documentation.centreon.com/docs/centreon/en/latest/release_notes/centreon-19.10.html
Release Notes
https://documentation.centreon.com/docs/centreon/en/latest/release_notes/centreon-2.8.html
Patch
https://github.com/TheCyberGeek/CVE-2019-16405.rb
More from Centreon Web
9.8
CVE-2026-2751
Blind SQL Injection
9.8
CVE-2024-32501
A SQL Injection vulnerability exists in the updateServiceHost functionality in Centreon Web 24.04.x before 24.04.3, 23.10.x before 23.10.13, 23.04.x before 23.04.19, and 22.10.x…
9.8
CVE-2018-11589
Multiple SQL injection vulnerabilities in Centreon 3.4.6 including Centreon Web 2.8.23 allow attacks via the searchU parameter in viewLogs.php, the id parameter in GetXmlHost.php,…
9.8
CVE-2018-11587
There is Remote Code Execution in Centreon 3.4.6 including Centreon Web 2.8.23 via the RPN value in the Virtual Metric form in centreonGraph.class.php
9.6
CVE-2023-51633
Centreon sysName Cross-Site Scripting Remote Code Execution Vulnerability