CVE-2025-34280

Nagios Network Analyzer versions prior to 2024R2.0.1 contain a vulnerability in the LDAP certificate management functionality whereby the certificate removal operation fails to apply adequate input sanitation. An authenticated administrator can trigger command execution on the underlying host in the context of the web application service, resulting in remote code execution with the service's privileges.

CVSS v3 7.2 HIGH

7.2^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.2 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://www.nagios.com/changelog/nagios-network-analyzer/	Release Notes
https://www.nagios.com/products/security/#network-analyzer	Product
https://www.vulncheck.com/advisories/nagios-network-analyzer-rce-in-ldap-certificate-removal-function	Third Party Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:nagios:network_analyzer::::::::
	cpe:2.3:a:nagios:network_analyzer:2024:r1.0.1::::::
	cpe:2.3:a:nagios:network_analyzer:2024:r1.0.2::::::
	cpe:2.3:a:nagios:network_analyzer:2024:r1.0.3::::::
	cpe:2.3:a:nagios:network_analyzer:2024:r2::::::

History

06 Nov 2025, 18:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2025-10-30 22:15

Updated : 2025-11-06 18:15

NVD link : CVE-2025-34280

Mitre link : CVE-2025-34280

CVE.ORG link : CVE-2025-34280

JSON object : View

Products Affected

nagios

network_analyzer

CWE

CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

{"id": "CVE-2025-34280", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "[email protected]", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.2, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.2}], "cvssMetricV40": [{"type": "Secondary", "source": "[email protected]", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 8.6, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "HIGH", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "HIGH", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "published": "2025-10-30T22:15:48.497", "references": [{"url": "https://www.nagios.com/changelog/nagios-network-analyzer/", "tags": ["Release Notes"], "source": "[email protected]"}, {"url": "https://www.nagios.com/products/security/#network-analyzer", "tags": ["Product"], "source": "[email protected]"}, {"url": "https://www.vulncheck.com/advisories/nagios-network-analyzer-rce-in-ldap-certificate-removal-function", "tags": ["Third Party Advisory"], "source": "[email protected]"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "[email protected]", "description": [{"lang": "en", "value": "CWE-78"}]}], "descriptions": [{"lang": "en", "value": "Nagios\u00a0Network Analyzer versions prior to\u00a02024R2.0.1 contain a vulnerability in the LDAP certificate management functionality whereby the certificate removal operation fails to apply adequate input sanitation. An authenticated administrator can trigger command execution on the underlying host in the context of the web application service, resulting in remote code execution with the service's privileges."}], "lastModified": "2025-11-06T18:15:09.103", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:nagios:network_analyzer:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1F1712DB-0BE7-4F0D-B589-FC00198554DC", "versionEndExcluding": "2024"}, {"criteria": "cpe:2.3:a:nagios:network_analyzer:2024:r1.0.1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "838238BA-47B3-44FF-8489-C38F0DD8C518"}, {"criteria": "cpe:2.3:a:nagios:network_analyzer:2024:r1.0.2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3BD749A8-4CA7-4F8C-89E3-B91F818DA6E8"}, {"criteria": "cpe:2.3:a:nagios:network_analyzer:2024:r1.0.3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9896555A-4661-43E4-970C-625C091639D2"}, {"criteria": "cpe:2.3:a:nagios:network_analyzer:2024:r2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C9164162-BCFA-4A9F-8C0F-719E7F1505D5"}], "operator": "OR"}]}], "sourceIdentifier": "[email protected]"}