PT-2017-12747 · Paessler · Prtg Network Monitor

Publicado 2017-08-24 · Atualizado 2017-09-12 · CVE-2017-12879

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Média

Vetor base

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Paessler PRTG Network Monitor versions prior to 17.3.33.2654

Description A cross-site scripting (XSS) issue exists in the DEVICES OR SENSORS functionality, allowing authenticated remote attackers to inject arbitrary web script or HTML.

Recommendations For versions prior to 17.3.33.2654, update to version 17.3.33.2654 or later to resolve the issue.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2017-12879

Produtos afetados

Prtg Network Monitor

Referências · 6

• https://paessler.com/prtg/history/preview · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2017-12879 · Aviso do Fabricante
• https://youtu.be/QOLdH2oey8Q · Nota
• https://paessler.com/prtg/history/stable · Nota
• https://drive.google.com/open?id=0B6WbMqXSfqQFODZHUGtLdzU3eDA · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-12879 · Nota de Segurança