PT-2020-9165 · Paessler · Prtg Network Monitor

Javier Jimenez · Published 2020-03-17 · Updated 2021-06-29 · CVE-2019-11074

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions PRTG Network Monitor versions 19.1.49 and below

Description A Write to Arbitrary Location in Disk issue exists due to insufficient sanitisation when passing arguments to the phantomjs.exe binary, allowing attackers to place files in arbitrary locations with SYSTEM privileges. Remote authenticated administrators can exploit this by creating a new HTTP Full Web Page Sensor and setting specific settings when executing the sensor.

Recommendations For versions 19.1.49 and below, update to a version above 19.1.49 to resolve the issue. As a temporary workaround, consider restricting access to the phantomjs.exe binary and the HTTP Full Web Page Sensor to minimize the risk of exploitation.

Exploit

Fix

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2019-11074

Affected Products

Prtg Network Monitor

References · 7

• 🔥 https://sensepost.com/blog/2019/being-stubborn-pays-off-pt.-1-cve-2018-19204 · Exploit
• https://osv.dev/vulnerability/CVE-2019-11074 · Vendor Advisory
• https://paessler.com/prtg/history/stable · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-11074 · Security Note
• https://how2itsec.blogspot.com/2019/10/security-fixes-in-prtg-1935152.html · Note
• https://t.me/cvenotify/1814 · Telegram Post
• https://t.me/cibsecurity/10549 · Telegram Post