VYPR
← All advisories
High severity8.8NVD Advisory· Published Oct 30, 2025· Updated Jun 16, 2026

CVE-2013-10073

CVE-2013-10073

Description

Nagios XI versions prior to 2012R1.6 contain a shell command injection vulnerability in the Auto-Discovery tool. User-controlled input is passed to a shell without adequate sanitation or argument quoting, allowing an authenticated user with access to discovery functionality to execute arbitrary commands with the privileges of the application service.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

9
  • Nagios/XI7 versions
    cpe:2.3:a:nagios:nagios_xi:*:*:*:*:*:*:*:*+ 6 more
    • cpe:2.3:a:nagios:nagios_xi:*:*:*:*:*:*:*:*range: <2012
    • cpe:2.3:a:nagios:nagios_xi:2012:r1.0:*:*:*:*:*:*
    • cpe:2.3:a:nagios:nagios_xi:2012:r1.1:*:*:*:*:*:*
    • cpe:2.3:a:nagios:nagios_xi:2012:r1.2:*:*:*:*:*:*
    • cpe:2.3:a:nagios:nagios_xi:2012:r1.3:*:*:*:*:*:*
    • cpe:2.3:a:nagios:nagios_xi:2012:r1.4:*:*:*:*:*:*
    • cpe:2.3:a:nagios:nagios_xi:2012:r1.5:*:*:*:*:*:*
  • Nagios/Nagiosllm-fuzzy
    Range: <2012R1.6
  • Nagios/XIv5
    Range: 0

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.