Firetruck

CVE-2018-19410

KEV

Paessler PRTG Network Monitor Local File Inclusion Vulnerability

View CVE record →
Vendor / Project
Paessler
Product
PRTG Network Monitor
Date added
Feb 4, 2025
Due date
Feb 25, 2025
Known ransomware use
Unknown
CWEs
—

Description

Paessler PRTG Network Monitor contains a local file inclusion vulnerability that allows a remote, unauthenticated attacker to create users with read-write privileges (including administrator).

Required action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notes