What’s Vulnerable › Vulnerabilities

CVE-2011-10017: Snort Report nmap.php/nbtscan.php RCE

• Severity: critical (CVSS 10.0 v4.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-08-13 · updated 2026-06-16
• Weakness: CWE-78

Description

Snort Report versions < 1.3.2 contains a remote command execution vulnerability in the nmap.php and nbtscan.php scripts. These scripts fail to properly sanitize user input passed via the target GET parameter, allowing attackers to inject arbitrary shell commands. Exploitation requires no authentication and can result in full compromise of the underlying system.

Affected products

• Symmetrix Technologies Snort Report: before 1.3.2 — fixed in 1.3.2

How to fix

Upgrade to a fixed version: Symmetrix Technologies Snort Report 1.3.2. Check the vendor advisory for mitigations.

References

• https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/multi/http/snortreport_exec.rb
• https://web.archive.org/web/20111003093911/http://www.symmetrixtech.com/articles/news-016.html
• https://www.exploit-db.com/exploits/17947
• https://www.vulncheck.com/advisories/snort-report-rce

Get alerted when CVE-2011-10017 or the next vulnerability affects your stack