ByteOS Network

NVD Vulnerability Details :

CVE-2023-32781

Modified

Source-cve@mitre.org

Published At-09 Aug, 2023 | 12:15

Updated At-23 Jan, 2024 | 17:15

A command injection vulnerability was identified in PRTG 23.2.84.1566 and earlier versions in the HL7 sensor where an authenticated user with write permissions could abuse the debug option to write new files that could potentially get executed by the EXE/Script sensor. The severity of this vulnerability is high and received a score of 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	7.2	HIGH	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CPE Matches

paessler>>prtg_network_monitor>>Versions before 23.3.86.1520(exclusive)

cpe:2.3:a:paessler:prtg_network_monitor:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-77	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
http://packetstormsecurity.com/files/176677/PRTG-Authenticated-Remote-Code-Execution.html	cve@mitre.org	N/A
https://kb.paessler.com/en/topic/91845-multiple-vulnerabilites-fixed-in-paessler-prtg-network-monitor-23-3-86-1520	cve@mitre.org	Vendor Advisory
https://www.paessler.com/prtg/history/stable	cve@mitre.org	Release Notes

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History