Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2019-11073

Опубликовано: 16 мар. 2020
Источник: nvd
CVSS3: 7.2
CVSS2: 9
EPSS Средний

Описание

A Remote Code Execution vulnerability exists in PRTG Network Monitor before 19.4.54.1506 that allows attackers to execute code due to insufficient sanitization when passing arguments to the HttpTransactionSensor.exe binary. In order to exploit the vulnerability, remote authenticated administrators need to create a new HTTP Transaction Sensor and set specific settings when the sensor is executed.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:paessler:prtg_network_monitor:*:*:*:*:*:*:*:*
Версия до 19.4.54.1506 (исключая)

EPSS

Процентиль: 94%
0.12676
Средний

7.2 High

CVSS3

9 Critical

CVSS2

Дефекты

CWE-74

Связанные уязвимости

github
больше 3 лет назад

A Remote Code Execution vulnerability exists in PRTG Network Monitor before 19.4.54.1506 that allows attackers to execute code due to insufficient sanitization when passing arguments to the HttpTransactionSensor.exe binary. In order to exploit the vulnerability, remote authenticated administrators need to create a new HTTP Transaction Sensor and set specific settings when the sensor is executed.

EPSS

Процентиль: 94%
0.12676
Средний

7.2 High

CVSS3

9 Critical

CVSS2

Дефекты

CWE-74