CVE-2019-11073
Summary
| CVE | CVE-2019-11073 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2020-03-16 19:15:00 UTC |
| Updated | 2020-08-24 17:37:00 UTC |
| Description | A Remote Code Execution vulnerability exists in PRTG Network Monitor before 19.4.54.1506 that allows attackers to execute code due to insufficient sanitization when passing arguments to the HttpTransactionSensor.exe binary. In order to exploit the vulnerability, remote authenticated administrators need to create a new HTTP Transaction Sensor and set specific settings when the sensor is executed. |
Risk And Classification
Problem Types: CWE-74
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Paessler | Prtg Network Monitor | All | All | All | All |
| Application | Paessler | Prtg Network Monitor | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| SensePost | Being stubborn pays off pt. 1 – cve-2018-19204 | MISC | sensepost.com | Exploit, Third Party Advisory |
| BSI - CERT Bund -Meldungen - CB-K19/1019 | MISC | www.bsi.bund.de | Third Party Advisory |
| PRTG Network Monitor - Version History | MISC | www.paessler.com | Release Notes |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.