CVE-2020-11547 Information disclosure in n/a
Remote unauthenticated attackers can obtain sensitive system information from PRTG Network Monitor via HTTP requests.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2020-11547?
CVE-2020-11547 is a medium-severity vulnerability in n/a, published on 4 Apr 2020. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
PRTG Network Monitor before 20.1.57.1745 allows remote unauthenticated attackers to obtain information about probes running or the server itself (CPU usage, memory, Windows version, and internal statistics) via an HTTP request, as demonstrated by type=probes to login.htm or index.htm.
Weakness: CWE-306
Which versions are affected by CVE-2020-11547?
It affects 1 product.
Products include Paessler Prtg Network Monitor.
How do I fix CVE-2020-11547?
No fix has been published for CVE-2020-11547 yet. Limit exposure of the affected software until one is available.
Is CVE-2020-11547 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2020-11547 exists.
Public exploit code: 1 Nuclei template and 1 proofs of concept on GitHub.
Other vulnerabilities in n/a
- CVE-2018-19410 Paessler PRTG Network Monitor Local File Inclusion
- CVE-2018-9276 Paessler PRTG Network Monitor OS Command Injection
- CVE-2020-10374 Command injection in n/a
- CVE-2023-51630 Paessler PRTG Network Monitor Cross-Site Scripting Authentication Bypass Vulnerability
- CVE-2023-31452 Cross-site request forgery in n/a
Sources
Also known as GHSA-rmq4-f55m-47cv.