CVE-2020-10374
Critical
Description
A webserver component in Paessler PRTG Network Monitor 19.2.50 to PRTG 20.1.56 allows unauthenticated remote command execution via a crafted POST request or the what parameter of the screenshot function in the Contact Support form.
SeverityCritical
CVSS9.8
Exploit probability—
Product
Paessler Prtg Network Monitor
PublishedMar 30, 2020
First seenMar 30, 2020
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| paessler prtg_network_monitor | 19.2.50 ≤ v ≤ 20.1.56 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.