CVE-2017-15917: Medium severity Paessler PRTG Network Monitor vulnerability
Published Oct 26, 2017
·Updated
In Paessler PRTG Network Monitor 17.3.33.2830, it's possible to create a Map as a read-only user, by forging a request and sending it to the server.
Affected Software
1 affected component
Paessler PRTG Network Monitor=17.3.33.2830
Event History
Oct 26, 2017
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-15917?
CVE-2017-15917 is rated as a moderate severity vulnerability due to the potential for unauthorized actions by read-only users.
2
How do I fix CVE-2017-15917?
To mitigate CVE-2017-15917, upgrade to a version of Paessler PRTG Network Monitor beyond 17.3.33.2830.
3
What impact does CVE-2017-15917 have on affected systems?
CVE-2017-15917 allows read-only users to create maps, potentially leading to unauthorized modifications in the monitoring system.
4
What versions of Paessler PRTG Network Monitor are affected by CVE-2017-15917?
CVE-2017-15917 affects Paessler PRTG Network Monitor version 17.3.33.2830.
5
Can CVE-2017-15917 be exploited remotely?
Yes, CVE-2017-15917 can be exploited remotely if an attacker can send forged requests to the server.