Aleksandr Melkikh

**Nome do software vulnerável e versões afetadas** Versões do PRTG 7.x a 19.4.53 **Descrição** O problema está relacionado ao controle de acesso insuficiente nas chaves do Registro local para o Serviço do Servidor Central. Isso permite que um usuário sem privilégios administrativos na máquina local acesse credenciais administrativas. **Recomendações** Para as versões 7.x a 19.4.53, considere restringir o acesso ao Serviço do Servidor Central para minimizar o risco de exploração até que uma correção esteja disponível.

Name of the Vulnerable Software and Affected Versions: Schneider Electric Modicon BMXNOR0200 (affected versions not specified) Schneider Electric Modicon M340 (affected versions not specified) Schneider Electric Modicon Premium (affected versions not specified) Schneider Electric Modicon Quantum PLC (affected versions not specified) Description: The issue is related to an error in parsing HTTP requests in the embedded web server of the affected devices. This could allow a remote attacker to execute arbitrary code on the web server using specially crafted HTTP requests. Recommendations: For Schneider Electric Modicon BMXNOR0200, consider disabling the HTTP request parser until a patch is available. For Schneider Electric Modicon M340, restrict access to the web server to minimize the risk of exploitation. For Schneider Electric Modicon Premium, avoid using the web server for critical operations until the issue is resolved. For Schneider Electric Modicon Quantum PLC, limit network exposure of the device to reduce the risk of remote exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.