CVE-2012-10048

CVE-2012-10048 describes a command injection vulnerability in Zenoss Core 3.x, specifically within the showDaemonXMLConfig endpoint. An authenticated attacker can exploit this by injecting arbitrary commands into the 'daemon' parameter, which is directly passed to a Popen() call in ZenossInfo.py without proper sanitization. This allows for remote code execution on the server as the zenoss user. The vulnerability carries a high CVSS score of 8.7, indicating a severe risk. It is easily exploitable over the network with low attack complexity and requires only low privileges, leading to high impacts on confidentiality, integrity, and availability. The EPSS score and FAUCET Risk Score further emphasize its significant threat potential. While not listed on the CISA KEV catalog, exploit intelligence confirms the existence of a Metasploit module for this vulnerability, indicating readily available exploit code. Community discussion is notably high, suggesting significant awareness and interest among security researchers.