THREAT OPS › Threat News › [GHSA] GHSA-jf24-8g2h-2wg7 (medium) — LibreNMS Vulnerable to Remote Code Execution via AboutController
[GHSA] GHSA-jf24-8g2h-2wg7 (medium) — LibreNMS Vulnerable to Remote Code Execution via AboutController
GHSA-jf24-8g2h-2wg7 Severity: medium CVE: None
LibreNMS Vulnerable to Remote Code Execution via AboutController
# Remote Code Execution via AboutController in LibreNMS
## Summary
A Remote Code Execution (RCE) vulnerability exists in LibreNMS 26.3.1 through the AboutController. An authenticated administrator can manipulate the `snmpget` configuration parameter to execute arbitrary system comman
MITRE ATT&CK techniques
- Malicious FileT1204.002
- CredentialsT1589.001
- Malicious PackageAML.T0011.001
- Reverse ShellAML.T0072
Original source: https://github.com/advisories/GHSA-jf24-8g2h-2wg7