Paessler PRTG Network Monitor OS Command Injection Vulnerability

[ Why it matters ]Priority signals

• Exploited in the wild: on CISA's Known Exploited Vulnerabilities list since 2025-02-04
• EPSS: 87% chance of exploitation in the next 30 days (higher than 100% of CVEs)

[ Description ]Official description

An issue was discovered in PRTG Network Monitor before 18.2.39. An attacker who has access to the PRTG System Administrator web console with administrative privileges can exploit an OS command injection vulnerability (both on the server and on devices) by sending malformed parameters in sensor or notification management scenarios.

CISA: Paessler PRTG Network Monitor contains an OS command injection vulnerability that allows an attacker with administrative privileges to execute commands via the PRTG System Administrator web console.

[ Fixes ]Fixes and patches

CISA required action (US federal deadline 25 Feb 2025): Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.

[ References ]References

• packetstormsecurity.com/files/148334/PRTG-Command-Injection.htmlExploitMitigationThird Party Advisory
• packetstormsecurity.com/files/161183/PRTG-Network-Monitor-Remote-Code-Execution.htmlExploitThird Party AdvisoryVDB Entry
• www.securityfocus.com/archive/1/542103/100/0/threadedBroken LinkThird Party AdvisoryVDB Entry
• www.exploit-db.com/exploits/46527ExploitThird Party AdvisoryVDB Entry
• www.cisa.gov/known-exploited-vulnerabilities-catalogUS Government Resource