CVE-2023-32781 Command injection in n/a
Authenticated users with write permissions can exploit the HL7 sensor debug option to execute arbitrary commands via the EXE/Script sensor.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-32781?
CVE-2023-32781 is a high-severity command injection vulnerability in n/a, published on 9 Aug 2023. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
A command injection vulnerability was identified in PRTG 23.2.84.1566 and earlier versions in the HL7 sensor where an authenticated user with write permissions could abuse the debug option to write new files that could potentially get executed by the EXE/Script sensor. The severity of this vulnerability is high and received a score of 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-77
Which versions are affected by CVE-2023-32781?
It affects 1 product.
Products include Paessler Prtg Network Monitor.
How do I fix CVE-2023-32781?
No fix has been published for CVE-2023-32781 yet. Limit exposure of the affected software until one is available.
Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.
Is CVE-2023-32781 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2023-32781 exists.
Public exploit code: 1 Metasploit module.
Other vulnerabilities in n/a
- CVE-2018-19410 Paessler PRTG Network Monitor Local File Inclusion
- CVE-2018-9276 Paessler PRTG Network Monitor OS Command Injection
- CVE-2020-10374 Command injection in n/a
- CVE-2023-51630 Paessler PRTG Network Monitor Cross-Site Scripting Authentication Bypass Vulnerability
- CVE-2023-31452 Cross-site request forgery in n/a
Sources
Also known as GHSA-6hrq-pjj8-qgcg.