CVE-2020-10374: Input Validation
Published Mar 30, 2020
·Updated
A webserver component in Paessler PRTG Network Monitor 19.2.50 to PRTG 20.1.56 allows unauthenticated remote command execution via a crafted POST request or the what parameter of the screenshot function in the Contact Support form.
Affected Software
1 affected component
Paessler PRTG Network Monitor>=19.2.50<=20.1.56
Event History
Mar 30, 2020
CVE Published
via MITRE·09:18 PM
Data Sourced
via MITRE·09:18 PM
Description
Frequently Asked Questions
1
What is CVE-2020-10374?
CVE-2020-10374 is a vulnerability in the webserver component of Paessler PRTG Network Monitor that allows unauthenticated remote command execution.
2
How severe is CVE-2020-10374?
CVE-2020-10374 has a severity of 9.8 (critical).
3
How can I mitigate CVE-2020-10374?
To mitigate CVE-2020-10374, you can apply the necessary update provided by Paessler, or follow the mitigation steps outlined in their knowledge base article.