RCE in Paessler Prtg_network_monitor
CVE-2023-32781
A command injection vulnerability was identified in PRTG 23.2.84.1566 and earlier versions in the HL7 sensor where an authenticated user with write permissions could abuse the debug option to write new files that could potentially get exec…
Vulnerability class: Command Injection (OS Command Injection)
EPSS: 0.123 (95.7th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.2 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Paessler Prtg_network_monitor
- N/a — versions n/a
Weakness classification (CWE)
Public proof-of-concept exploits
References
- cve@mitre.org (Release Notes)
- cve@mitre.org (Vendor Advisory)
- cve@mitre.org
Frequently asked questions
- What is CVE-2023-32781?
- CVE-2023-32781 is a high-severity vulnerability in Paessler Prtg_network_monitor, classified under Command Injection. CVSS score: 7.2/10. Published 2023-08-09.
- How severe is CVE-2023-32781?
- High severity. CVSS v3 base score is 7.2 out of 10.
- Is CVE-2023-32781 known to be exploited?
- 3 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.