7.2high
CVE-2018-9276KEVin critical feed2 exploits
An issue was discovered in PRTG Network Monitor before 18.2.39.
Published 8 y ago · modified 4 mo ago · JSON
CVSS
7.2
v3.1 · CNA
CISA KEV
Yes
added 2025-02-04
EPSS
87.0%
percentile 100%
Public exploits
2
Metasploit · Exploit-DB
Summary
An issue was discovered in PRTG Network Monitor before 18.2.39. An attacker who has access to the PRTG System Administrator web console with administrative privileges can exploit an OS command injection vulnerability (both on the server and on devices) by sending malformed parameters in sensor or notification management scenarios.
Known exploited (CISA KEV)
- Added
- 21 mo ago
- Due date
- 2025-02-25 (20 mo ago)
- Ransomware use
- Unknown
- Required action
- Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- Vendor / product
- Paessler / PRTG Network Monitor
- CISA name
- Paessler PRTG Network Monitor OS Command Injection Vulnerability
CISA SSVC assessment
- Exploitation
- Active — exploited in the wild
- Automatable
- no
- Technical impact
- total
- Assessed
- 21 mo ago
Exploit prediction (EPSS)
87.00% probability of exploitation in the next 30 days, higher than 100% of all scored CVEs.
Exploits and detections
- Metasploit exploit/windows/http/prtg_authenticated_rce PRTG Network Monitor Authenticated RCE · metasploit exploit, excellent rank · 2018-06-25
- EDB-46527 PRTG Network Monitor 18.2.38 - (Authenticated) Remote Code Execution · webapps · 2019-03-11
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| CISA ADP | 3.1 | 7.2 | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H |
| NVD | 3.1 | 7.2 | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H |
| CNA | 3.1 | 7.2 | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H |
| NVD | 2.0 | 9.0 | AV:N/AC:L/Au:S/C:C/I:C/A:C |
Classification
- Weakness
- CWE-78 Improper Neutralization of Special Elements used in an OS Command
References
- packetstormsecurity.com /files/148334/PRTG-Command-Injection.html · x_refsource_MISC, x_transferred
- exploit-db.com /exploits/46527/ · exploit, x_refsource_EXPLOIT-DB, x_transferred
- securityfocus.com /archive/1/542103/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
- packetstormsecurity.com /files/161183/PRTG-Network-Monitor-Remote-Code-Execution.html · x_refsource_MISC, x_transferred
- cisa.gov /known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-9276 · government-resource
Sources
- CVE List: CVE-2018-9276
- NVD: CVE-2018-9276
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.