Skip to content
COOEY

EXPOSURES › CVE-2021-25298

CVE-2021-25298

HIGH ⌖ ON CISA KEV · EXPLOITED
DETAIL
SourceCISA-KEV · kev Published2022-01-18 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2021-25298 ↗
⚡ RCE ⌖ EXPLOITED IN THE WILD SHAME 75/100 rceexploited-in-wildunpatched

Nagios XI suffered an OS command injection vulnerability that was actively exploited in the wild.

Nagios XI contained an OS command injection flaw allowing attackers to execute arbitrary commands on the server. This is a critical failure for DIB organizations because it enables remote code execution, leading to potential data breaches, system compromise, and ransomware entry. Organizations must ensure Nagios XI is patched to a version that includes the fix for CVE-2021-25298.

Shame score — The vulnerability was actively exploited in the wild (KEV list) and linked to command injection, indicating a severe, avoidable failure in patch management and input validation.

▸ RECOMMENDED ACTION  Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.

PLAYERS IMPLICATED
Nagios · vendorNagios XI · product
DESCRIPTION

Nagios XI contains a vulnerability which can lead to OS command injection on the Nagios XI server.

SENTIMENT · TRUSTED SOURCES
synthesis severe-fallout -0.60
Vulnerability allows OS command injection, posing significant risk to Nagios XI deployments.
cooey ↗ severe-fallout -0.60
Vulnerability allows OS command injection, posing significant risk to Nagios XI deployments.
"Nagios XI contains a vulnerability which can lead to OS command injection on the Nagios XI server."
AFFECTED FEDRAMP PRODUCTS · 0
No correlated FedRAMP products.