PT-2021-17331 · Paessler · Prtg Network Monitor

Published 2021-03-31 · Updated 2021-04-06 · CVE-2021-27220

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions: PRTG Network Monitor versions prior to 21.1.66.1623

Description: An issue was discovered in PRTG Network Monitor. By invoking the screenshot functionality with prepared context paths, an attacker is able to verify the existence of certain files on the filesystem of the PRTG's Web server.

Recommendations: For versions prior to 21.1.66.1623, update to version 21.1.66.1623 or later to resolve the issue. As a temporary workaround, consider restricting access to the screenshot functionality until a patch is applied.

Fix

Related Identifiers

CVE-2021-27220

Affected Products

Prtg Network Monitor

References · 5

• https://osv.dev/vulnerability/CVE-2021-27220 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-27220 · Security Note
• https://paessler.com/prtg/history/stable#21.1.66.1623 · Vendor Advisory
• https://t.me/cvenotify/12429 · Telegram Post
• https://t.me/cvenotify/12430 · Telegram Post