CVE-2020-10374

State: Published
Severity: Not scored
Published: Mar 30, 2020
Updated: Aug 4, 2024
Reserved: Mar 10, 2020

Description

A webserver component in Paessler PRTG Network Monitor 19.2.50 to PRTG 20.1.56 allows unauthenticated remote command execution via a crafted POST request or the what parameter of the screenshot function in the Contact Support form.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

https://www.paessler.com/prtg/history/stable#20.1.57.1745
https://kb.paessler.com/en/topic/87668-how-can-i-mitigate-cve-2020-10374-until-i-can-update
https://tehtris.com/en/rce-on-prtg-network-monitor-tehtris-pentest/

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.