Remote Service Termination Vulnerability in PRTG Network Monitor by Paessler
CVE-2018-19203

7.5HIGH

Key Information:

Vendor

Paessler

Status
Prtg Network Monitor
Vendor
CVE Published:
12 November 2018

What is CVE-2018-19203?

PRTG Network Monitor versions prior to 18.2.41.1652 are susceptible to a remote service termination vulnerability that allows unauthenticated attackers to send a specially crafted HTTP request. This request can inadvertently terminate the PRTG Core Server Service, disrupting the monitoring functionality and potentially leading to service interruptions. Users of the affected product are advised to update to the latest version to mitigate exposure to such attacks.

References

https://www.ptsecurity.com/ww-en/analytics/threatscape/pt...
x_refsource_MISC
https://www.paessler.com/prtg/history/stable#18.2.41.1652
x_refsource_MISC
http://en.securitylab.ru/lab/PT-2018-22
x_refsource_MISC

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.