Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-32782
HistoryAug 09, 2023 - 12:15 p.m.

Command injection

2023-08-0912:15:00
PRIOn knowledge base
www.prio-n.com
13
command injection
prtg
dicom
c-echo sensor
authenticated user
write permissions
debug option
file execution
cvss:3.1
high severity

7.1 High

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.9%

A command injection was identified in PRTG 23.2.84.1566 and earlier versions in the Dicom C-ECHO sensor where an authenticated user with write permissions could abuse the debug option to write new files that could potentially get executed by the EXE/Script sensor. The severity of this vulnerability is high and received a score of 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CPENameOperatorVersion
prtg_network_monitorlt23.3.86.1520

7.1 High

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.9%

Related for PRION:CVE-2023-32782