Medium severity · published Apr 5, 2020
CVE-2020-11547
PRTG Network Monitor before 20.1.57.1745 allows remote unauthenticated attackers to obtain information about probes running or the server itself (CPU usage, memory, Windows…
5.3
CVSS
52.1%
EPSS
No
On KEV
Description
PRTG Network Monitor before 20.1.57.1745 allows remote unauthenticated attackers to obtain information about probes running or the server itself (CPU usage, memory, Windows version, and internal statistics) via an HTTP request, as demonstrated by type=probes to login.htm or index.htm.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
Low
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)52.1% · higher than 99% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PN
Prtg Network Monitor · Paessler
before 20.1.57.1745 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-11547
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-11547
Broken Link
https://github.com/ch-rigu/PRTG-Network-Monitor-Information-Disclosure
More from Prtg Network Monitor
9.8
CVE-2018-19410
Paessler PRTG Network Monitor Local File Inclusion Vulnerability
7.2
CVE-2018-9276
Paessler PRTG Network Monitor OS Command Injection Vulnerability
9.8
CVE-2020-10374
A webserver component in Paessler PRTG Network Monitor 19.2.50 to PRTG 20.1.56 allows unauthenticated remote command execution via a crafted POST request or the what parameter of…
8.8
CVE-2023-31452
A cross-site request forgery (CSRF) token bypass was identified in PRTG 23.2.84.1566 and earlier versions that allows remote attackers to perform actions with the permissions of a…
8.8
CVE-2018-19411
PRTG Network Monitor before 18.2.40.1683 allows an authenticated user with a read-only account to create another user with a read-write account (including administrator) via an…