PT-2020-9164 · Paessler · Prtg Network Monitor

Javier Jimenez · Published 2020-03-16 · Updated 2020-08-24 · CVE-2019-11073

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions PRTG Network Monitor versions prior to 19.4.54.1506

Description A Remote Code Execution issue exists due to insufficient sanitization when passing arguments to the HttpTransactionSensor.exe binary. This allows attackers to execute code. To exploit the issue, remote authenticated administrators need to create a new HTTP Transaction Sensor and set specific settings when the sensor is executed.

Recommendations For versions prior to 19.4.54.1506, update to version 19.4.54.1506 or later to resolve the issue. As a temporary workaround, consider restricting access to the HttpTransactionSensor.exe binary until a patch is applied. Additionally, limit the creation of new HTTP Transaction Sensors to minimize the risk of exploitation.

Exploit

Fix

RCE

Special Elements Injection

Weakness Enumeration

CWE-74

Related Identifiers

CVE-2019-11073

Affected Products

Prtg Network Monitor

References · 7

• 🔥 https://sensepost.com/blog/2019/being-stubborn-pays-off-pt.-1-cve-2018-19204 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-11073 · Security Note
• https://osv.dev/vulnerability/CVE-2019-11073 · Vendor Advisory
• https://t.me/cvenotify/1764 · Telegram Post
• https://paessler.com/prtg/history/stable · Note
• https://bsi.bund.de/SharedDocs/Warnmeldungen/DE/CB/2019/11/warnmeldung_cb-k19-1019.html · Note
• https://t.me/cibsecurity/10528 · Telegram Post