Vulnerability Description
PRTG Network Monitor before 18.3.44.2054 allows a remote authenticated attacker (with read-write privileges) to execute arbitrary code and OS commands with system privileges. When creating an HTTP Advanced Sensor, the user's input in the POST parameter 'proxyport_' is mishandled. The attacker can craft an HTTP request and override the 'writeresult' command-line parameter for HttpAdvancedSensor.exe to store arbitrary data in an arbitrary place on the file system. For example, the attacker can create an executable file in the \Custom Sensors\EXE directory and execute it by creating EXE/Script Sensor.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Paessler | Prtg Network Monitor | < 18.3.44.2054 |
Related Weaknesses (CWE)
References
- http://en.securitylab.ru/lab/PT-2018-23Third Party Advisory
- https://www.paessler.com/prtg/history/stable#18.3.44.2054Vendor Advisory
- https://www.ptsecurity.com/ww-en/analytics/threatscape/pt-2018-23/Third Party Advisory
- http://en.securitylab.ru/lab/PT-2018-23Third Party Advisory
- https://www.paessler.com/prtg/history/stable#18.3.44.2054Vendor Advisory
- https://www.ptsecurity.com/ww-en/analytics/threatscape/pt-2018-23/Third Party Advisory
FAQ
What is CVE-2018-19204?
CVE-2018-19204 is a vulnerability with a CVSS score of 8.8 (HIGH). PRTG Network Monitor before 18.3.44.2054 allows a remote authenticated attacker (with read-write privileges) to execute arbitrary code and OS commands with system privileges. When creating an HTTP Adv...
How severe is CVE-2018-19204?
CVE-2018-19204 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2018-19204?
Check the references section above for vendor advisories and patch information. Affected products include: Paessler Prtg Network Monitor.