CVE-2023-32781
HIGHPaessler PRTG Network Monitor < 23.3.86.1520 - Authenticated Command Injection
Title source: manualExploitation Summary
EIP tracks 1 public exploit for CVE-2023-32781.
Includes Metasploit module exploits/windows/http/prtg_authenticated_rce_cve_2023_32781.
AI-analyzed exploit summary This Metasploit module exploits an authenticated RCE vulnerability in Paessler PRTG by creating a malicious HL7 sensor to write and execute a .bat file on the target system. It includes authentication, CSRF token handling, and cleanup of created sensors.
Description
A command injection vulnerability was identified in PRTG 23.2.84.1566 and earlier versions in the HL7 sensor where an authenticated user with write permissions could abuse the debug option to write new files that could potentially get executed by the EXE/Script sensor. The severity of this vulnerability is high and received a score of 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Exploits (1)
This Metasploit module exploits an authenticated RCE vulnerability in Paessler PRTG by creating a malicious HL7 sensor to write and execute a .bat file on the target system. It includes authentication, CSRF token handling, and cleanup of created sensors.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H