CVE-2023-32781

EPSS 12.3%

Vexday Risk Score

23Bajo

Decisión SSVC (CISA)

Attend

PoC disponible → seguir de cerca

Madurez del exploit

Exploit funcional

Exploit automatizable disponible (Nuclei/Metasploit).

CVSS —EPSS 12.3%KEV nãoPoC —Nuclei —Metasploit simPatch —

Ciclo de vida

09 ago 2023Exploit Metasploit disponible

09 ago 2023Publicada en NVD

Velocidad de armamento

el mismo díahasta el módulo Metasploit

Armada rápidamente — los atacantes priorizaron esta vulnerabilidad. Corrige con urgencia.

Recomendación: Planificar corrección próxima — ya existe PoC pública.

A command injection vulnerability was identified in PRTG 23.2.84.1566 and earlier versions in the HL7 sensor where an authenticated user with write permissions could abuse the debug option to write new files that could potentially get executed by the EXE/Script sensor. The severity of this vulnerability is high and received a score of 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Productos afectados

n/a · n/a

Referencias

http://packetstormsecurity.com/files/176677/PRTG-Authenticated-Remote-Code-Execution.html https://kb.paessler.com/en/topic/91845-multiple-vulnerabilites-fixed-in-paessler-prtg-network-monitor-23-3-86-1520 https://www.paessler.com/prtg/history/stable