Command Injection Vulnerability in PRTG Could Lead to Execution of Malicious Code

CVE-2023-32782

What is CVE-2023-32782?

A command injection vulnerability has been discovered in PRTG Network Monitor, specifically within the Dicom C-ECHO sensor. This issue allows an authenticated user with write permissions to exploit the debug option, enabling the modification and creation of files. These files can be executed by the EXE/Script sensor, posing a risk of unauthorized actions being performed on the system. It is crucial for users and administrators of PRTG Network Monitor to address this vulnerability by updating to the latest patched versions to mitigate potential security threats.

References