High severity · published Jul 2, 2018
CVE-2018-9276
Paessler PRTG Network Monitor OS Command Injection Vulnerability
In wildKEV
7.2
CVSS
87%
EPSS
Yes
On KEV
Description
An issue was discovered in PRTG Network Monitor before 18.2.39. An attacker who has access to the PRTG System Administrator web console with administrative privileges can exploit an OS command injection vulnerability (both on the server and on devices) by sending malformed parameters in sensor or notification management scenarios.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)87.0% · higher than 100% of CVEs
Exploited in the wildYes
CISA KEVListed Feb 4, 2025
Federal remediation dueFeb 25, 2025
Ransomware campaign useNot known
Affected products
Which versions
PN
Prtg Network Monitor · Paessler
before 18.2.39; after 19.3.52 before 21.2.68 · source: NVD, KEV
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2018-9276
CVE.org
https://www.cve.org/CVERecord?id=CVE-2018-9276
CISA KEV catalogue
https://www.cisa.gov/known-exploited-vulnerabilities-catalog
x_refsource_MISC
http://packetstormsecurity.com/files/148334/PRTG-Command-Injection.html
exploit
https://www.exploit-db.com/exploits/46527/
mailing-list
http://www.securityfocus.com/archive/1/542103/100/0/threaded
x_refsource_MISC
http://packetstormsecurity.com/files/161183/PRTG-Network-Monitor-Remote-Code-Execution.html
More from Prtg Network Monitor
9.8
CVE-2018-19410
Paessler PRTG Network Monitor Local File Inclusion Vulnerability
9.8
CVE-2020-10374
A webserver component in Paessler PRTG Network Monitor 19.2.50 to PRTG 20.1.56 allows unauthenticated remote command execution via a crafted POST request or the what parameter of…
8.8
CVE-2023-31452
A cross-site request forgery (CSRF) token bypass was identified in PRTG 23.2.84.1566 and earlier versions that allows remote attackers to perform actions with the permissions of a…
8.8
CVE-2018-19411
PRTG Network Monitor before 18.2.40.1683 allows an authenticated user with a read-only account to create another user with a read-write account (including administrator) via an…
8.8
CVE-2018-19204
PRTG Network Monitor before 18.3.44.2054 allows a remote authenticated attacker (with read-write privileges) to execute arbitrary code and OS commands with system privileges