Critical · published November 21, 2018
CVSS calls it critical at 9.8. It is confirmed in active exploitation. It sits in the 99.9th percentile for exploit probability.
🚨 A single HTTP request is all it takes for an attacker to gain full control over your PRTG Network Monitor! 🔥 Think of it like a hotel where anyone can just walk up to the front desk and check in as the owner. With this vulnerability, attackers can create users with read-write privileges, including administrator access, as easily as flipping a switch. This means an attacker could gain complete control over your network monitoring setup, allowing them to manipulate settings, access sensitive data, or even shut down monitoring entirely. The consequences could be absolutely devastating for your organization's security and operational integrity!
Think of it like a hotel where anyone can just walk up to the front desk and check in as the owner. With this vulnerability, attackers can create users with read-write privileges, including administrator access, as easily as flipping a switch. This vulnerability allows an unauthenticated remote attacker to craft a malicious HTTP request that creates a user with elevated privileges by exploiting the 'include' directive in /public/login.htm, leading to Local File Inclusion (LFI).
This means an attacker could gain complete control over your network monitoring setup, allowing them to manipulate settings, access sensitive data, or even shut down monitoring entirely. The consequences could be absolutely devastating for your organization's security and operational integrity! Immediate action is crucial! Upgrade your PRTG Network Monitor to version 18.2.40.1684 or later to close this security hole. Additionally, review user access controls and consider implementing network segmentation to limit exposure. You've got this! With these steps, you'll fortify your defenses in no time. 🛡️