CVE-2025-34280

Nagios Network Analyzer versions prior to 2024R2.0.1 contain a vulnerability in the LDAP certificate management functionality whereby the certificate removal operation fails to apply adequate input sanitation. An authenticated administrator can trigger command execution on the underlying host in the context of the web application service, resulting in remote code execution with the service's privileges.

CVSS v3 7.2 HIGH

7.2^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.2 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://www.nagios.com/changelog/nagios-network-analyzer/	Release Notes
https://www.nagios.com/products/security/#network-analyzer	Product
https://www.vulncheck.com/advisories/nagios-network-analyzer-rce-in-ldap-certificate-removal-function	Third Party Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:nagios:network_analyzer::::::::
	cpe:2.3:a:nagios:network_analyzer:2024:r1.0.1::::::
	cpe:2.3:a:nagios:network_analyzer:2024:r1.0.2::::::
	cpe:2.3:a:nagios:network_analyzer:2024:r1.0.3::::::
	cpe:2.3:a:nagios:network_analyzer:2024:r2::::::

History

07 Oct 2026, 21:10

Type	Values Removed	Values Added
Summary		(es) Las versiones de Nagios Network Analyzer anteriores a 2024R2.0.1 contienen una vulnerabilidad en la funcionalidad de gestión de certificados LDAP mediante la cual la operación de eliminación de certificados no aplica una sanitización de entrada adecuada. Un administrador autenticado puede desencadenar la ejecución de comandos en el host subyacente en el contexto del servicio de la aplicación web, lo que resulta en ejecución remota de código con los privilegios del servicio.

Information

Published : 2025-10-30 22:15

Updated : 2026-10-07 21:10

NVD link : CVE-2025-34280

Mitre link : CVE-2025-34280

CVE.ORG link : CVE-2025-34280

JSON object : View

Products Affected

nagios

network_analyzer

CWE

CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

{"id": "CVE-2025-34280", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-34280", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2025-10-31T15:10:36.562793Z"}}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.2, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.2}], "cvssMetricV40": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 8.6, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "HIGH", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "HIGH", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "disclosure@vulncheck.com", "affectedData": [{"vendor": "Nagios", "modules": ["LDAP certificate management"], "product": "Network Analyzer", "versions": [{"status": "affected", "version": "0", "lessThan": "2024R2.0.1", "versionType": "custom"}], "defaultStatus": "unaffected"}]}], "published": "2025-10-30T22:15:48.497", "references": [{"url": "https://www.nagios.com/changelog/nagios-network-analyzer/", "tags": ["Release Notes"], "source": "disclosure@vulncheck.com"}, {"url": "https://www.nagios.com/products/security/#network-analyzer", "tags": ["Product"], "source": "disclosure@vulncheck.com"}, {"url": "https://www.vulncheck.com/advisories/nagios-network-analyzer-rce-in-ldap-certificate-removal-function", "tags": ["Third Party Advisory"], "source": "disclosure@vulncheck.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "description": [{"lang": "en", "value": "CWE-78"}]}], "descriptions": [{"lang": "en", "value": "Nagios\u00a0Network Analyzer versions prior to\u00a02024R2.0.1 contain a vulnerability in the LDAP certificate management functionality whereby the certificate removal operation fails to apply adequate input sanitation. An authenticated administrator can trigger command execution on the underlying host in the context of the web application service, resulting in remote code execution with the service's privileges."}, {"lang": "es", "value": "Las versiones de Nagios Network Analyzer anteriores a 2024R2.0.1 contienen una vulnerabilidad en la funcionalidad de gesti\u00f3n de certificados LDAP mediante la cual la operaci\u00f3n de eliminaci\u00f3n de certificados no aplica una sanitizaci\u00f3n de entrada adecuada. Un administrador autenticado puede desencadenar la ejecuci\u00f3n de comandos en el host subyacente en el contexto del servicio de la aplicaci\u00f3n web, lo que resulta en ejecuci\u00f3n remota de c\u00f3digo con los privilegios del servicio."}], "lastModified": "2026-10-07T21:10:00.200", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:nagios:network_analyzer:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1F1712DB-0BE7-4F0D-B589-FC00198554DC", "versionEndExcluding": "2024"}, {"criteria": "cpe:2.3:a:nagios:network_analyzer:2024:r1.0.1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "838238BA-47B3-44FF-8489-C38F0DD8C518"}, {"criteria": "cpe:2.3:a:nagios:network_analyzer:2024:r1.0.2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3BD749A8-4CA7-4F8C-89E3-B91F818DA6E8"}, {"criteria": "cpe:2.3:a:nagios:network_analyzer:2024:r1.0.3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9896555A-4661-43E4-970C-625C091639D2"}, {"criteria": "cpe:2.3:a:nagios:network_analyzer:2024:r2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C9164162-BCFA-4A9F-8C0F-719E7F1505D5"}], "operator": "OR"}]}], "sourceIdentifier": "disclosure@vulncheck.com"}