CVE-2014-3829: Merethis Centreon

High severity, CVSS 10.0. EPSS: 80.2% chance of exploitation in the next 30 days.

displayServiceStatus.php in Centreon 2.5.1 and Centreon Enterprise Server 2.2 (fixed in Centreon web 2.5.3) allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) session_id or (2) template_id parameter, related to the command_line variable.

Affected products

• Merethis Centreon: version 2.5.1 only
• Merethis Centreon Enterprise Server: version 2.2 only

Published 2014-10-23. Last modified 2026-06-17.