Every CVE Search/ Get API key

CVE-2002-1478

Cacti before 0.6.8 allows attackers to execute arbitrary commands via the "Data Input" option in...

10.0 HighFix available

CVE-2002-1478 is a high vulnerability (CVSS 10.0) in The Cacti Group Cacti, published September 10, 2002. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.51%, the 84th percentile. Fixed in cacti 0.6.8a-2.

Cacti before 0.6.8 allows attackers to execute arbitrary commands via the "Data Input" option in console mode.

Exploit likelihood

2.51%Up 1.5 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 10.0

Cacti before 0.6.8 allows attackers to execute arbitrary commands via the "Data Input" option in console mode.

Record
CVE-2002-1478
CVSS 2.0
10.0 HighAV:N/AC:L/Au:N/C:C/I:C/A:C
Updated
2026-11-02
CVE List No score

Cacti before 0.6.8 allows attackers to execute arbitrary commands via the "Data Input" option in console mode.

Record
CVE-2002-1478
Updated
2026-11-02
EUVDEUVD-2002-1461 No score

Cacti before 0.6.8 allows attackers to execute arbitrary commands via the "Data Input" option in console mode.

Record
EUVD-2002-1461
Updated
2026-11-03
GitHub AdvisoriesGHSA-2v8j-4895-h2g9 No score

Cacti before 0.6.8 allows attackers to execute arbitrary commands via the "Data Input" option in...

Cacti before 0.6.8 allows attackers to execute arbitrary commands via the "Data Input" option in console mode.

Record
GHSA-2v8j-4895-h2g9
Updated
2026-11-02
OSV No score

Cacti before 0.6.8 allows attackers to execute arbitrary commands via the "Data Input" option in console mode.

Record
CVE-2002-1478
Updated
2026-11-02
OSVDEBIAN-CVE-2002-1478 No score

Cacti before 0.6.8 allows attackers to execute arbitrary commands via the "Data Input" option in console mode.

Record
DEBIAN-CVE-2002-1478
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
cacti
Debian:12
before 0.6.8a-2
0.6.8a-2
cacti
Debian:13
before 0.6.8a-2
0.6.8a-2
cacti
Debian:14
before 0.6.8a-2
0.6.8a-2
cacti
Debian:3.0
before 0.6.7-2.1, plus listed versions
0.6.7-2
0.6.7-2.1

History

History
WhenChangedSources
2026-11-03aliasesEUVD
2026-11-02createdCVE List, GitHub Advisories, NVD, OSV

References

MoveEnter Open