Stored Cross-Site Scripting Vulnerability in PRTG Network Monitor by Paessler
CVE-2021-29643

5.4MEDIUM

Key Information:

Vendor

Paessler

Status
Prtg Network Monitor
Vendor
CVE Published:
13 September 2021

What is CVE-2021-29643?

The PRTG Network Monitor software prior to version 21.3.69.1333 is susceptible to stored Cross-Site Scripting (XSS). This vulnerability occurs due to an unsanitized string imported from a User Object connected via Active Directory. Attackers can exploit this flaw to inject malicious scripts that can be executed in the context of other users, potentially compromising sensitive data and system integrity.

References

https://raxis.com/blog/prtg-network-monitor-cve-2021-29643
x_refsource_MISC
https://www.paessler.com/prtg/history/stable#21.3.69.1333
x_refsource_MISC

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.