CVE-2013-3509: html/System-NeDi.php in the NeDi component in GroundWork Monitor Enterprise 6.7.0 allows remote authenticat...

Security readout for executives and security teams

This issue lets a logged-in user of GroundWork Monitor Enterprise 6.7.0 abuse the NeDi scan function to run operating-system commands. For executives, the business risk is that a monitoring platform could become a foothold into infrastructure if exposed to untrusted or overprivileged users. Exposure is most likely where GroundWork Monitor Enterprise 6.7.0 is still deployed, the NeDi component is enabled, and authenticated users can reach the System / NeDi scan workflow. Prioritize remediation if this product remains in use, especially on networks with broad user access or critical monitoring privileges. Legacy monitoring servers often hold sensitive network context and can amplify compromise. Mitigation focus: Check GroundWork advisory SA6.7.0-1 for vendor-provided fixes or upgrade guidance.; Restrict GroundWork administrative access to trusted administrators only.; Disable or remove the NeDi scan functionality if it is not required..

Prepared

Jun 14, 2026, 22:07 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.