Actively exploited · Published Jul 2, 2018 · Assigned by mitre
CVE-2018-9276
High 7.2 Exploited
In plain English
A high-severity OS command injection in PRTG Network Monitor from Paessler. Attackers are actively exploiting it in the wild (listed by CISA on February 4, 2025). The chance it is exploited in the next 30 days is estimated at 87.0% (higher than 99.7% of all known vulnerabilities). Ready-made attack tooling exists: Metasploit, public proof-of-concept code. Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
CISA guidance
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Federal agencies must remediate by Feb 25, 2025.
Official description
An issue was discovered in PRTG Network Monitor before 18.2.39. An attacker who has access to the PRTG System Administrator web console with administrative privileges can exploit an OS command injection vulnerability (both on the server and on devices) by sending malformed parameters in sensor or notification management scenarios.
Affected products (as reported)
Weakness: CWE-78 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
References
- http://packetstormsecurity.com/files/148334/PRTG-Command-Injection.html x_refsource_MISC
- 46527 exploit, x_refsource_EXPLOIT-DB
- 20180626 PRTG < 18.2.39 Command Injection mailing-list, x_refsource_BUGTRAQ
- http://packetstormsecurity.com/files/161183/PRTG-Network-Monitor-Remote-Code-Execution.html x_refsource_MISC
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-9276 government-resource