CVE-2020-11547

medium · 5.3

A public exploit / detection template exists

Weaponised detection is publicly available, which meaningfully raises real-world risk regardless of CVSS. nuclei-templates →

PRTG Network Monitor before 20.1.57.1745 allows remote unauthenticated attackers to obtain information about probes running or the server itself (CPU usage, memory, Windows version, and internal statistics) via an HTTP request, as demonstrated by type=probes to login.htm or index.htm.

5.3

CVSS

52.1%

EPSS (exploit prob.)

99th

EPSS percentile

2020-04-05

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weaknesses

CWE-306

Affected products

Vendor	Product	Affected versions
paessler	prtg_network_monitor	< 20.1.57.1745

Check a specific version with /api/v1/cve/match.

References

https://github.com/ch-rigu/PRTG-Network-Monitor-Information-Disclosure
https://github.com/ch-rigu/PRTG-Network-Monitor-Information-Disclosure

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2020-11547