{"id":"CVE-2023-32781","aliases":["EUVD-2023-37004","GHSA-6hrq-pjj8-qgcg"],"status":"published","title":"An issue was discovered in Paessler PRTG Network Monitor 23.2.83.1760. Due to command-line...","description":"A command injection vulnerability was identified in PRTG 23.2.84.1566 and earlier versions in the HL7 sensor where an authenticated user with write permissions could abuse the debug option to write new files that could potentially get executed by the EXE/Script sensor. The severity of this vulnerability is high and received a score of 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","severity":{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.14261,"percentile":0.96641,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-77"],"published":"2023-08-09T00:00:00Z","modified":"2026-06-17T05:59:33Z","exploits":[{"source":"metasploit","id":"exploit/windows/http/prtg_authenticated_rce_cve_2023_32781","title":"PRTG CVE-2023-32781 Authenticated RCE","type":"exploit","platform":"Windows","date":"2023-08-09","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/windows/http/prtg_authenticated_rce_cve_2023_32781"}],"products":[{"vendor":"paessler","product":"prtg_network_monitor"}],"references":[{"url":"https://www.paessler.com/prtg/history/stable","tags":["x_transferred","Release Notes"]},{"url":"https://kb.paessler.com/en/topic/91845-multiple-vulnerabilites-fixed-in-paessler-prtg-network-monitor-23-3-86-1520","tags":["x_transferred","Vendor Advisory"]},{"url":"http://packetstormsecurity.com/files/176677/PRTG-Authenticated-Remote-Code-Execution.html","tags":["x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-32781"},{"url":"https://github.com/advisories/GHSA-6hrq-pjj8-qgcg"}],"sources":{"cve":[{"id":"CVE-2023-32781","description":"A command injection vulnerability was identified in PRTG 23.2.84.1566 and earlier versions in the HL7 sensor where an authenticated user with write permissions could abuse the debug option to write new files that could potentially get executed by the EXE/Script sensor. The severity of this vulnerability is high and received a score of 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","status":"published","published":"2023-08-09T00:00:00Z","modified":"2024-08-02T15:25:37.047Z","updated_at":"2026-11-02T14:35:29.381004Z"}],"euvd":[{"id":"EUVD-2023-37004","description":"A command injection vulnerability was identified in PRTG 23.2.84.1566 and earlier versions in the HL7 sensor where an authenticated user with write permissions could abuse the debug option to write new files that could potentially get executed by the EXE/Script sensor. The severity of this vulnerability is high and received a score of 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","status":"published","published":"2023-08-09T00:00:00Z","modified":"2024-08-02T15:25:37Z","updated_at":"2026-11-03T03:50:05.016714Z"}],"ghsa":[{"id":"GHSA-6hrq-pjj8-qgcg","title":"An issue was discovered in Paessler PRTG Network Monitor 23.2.83.1760. Due to command-line...","description":"An issue was discovered in Paessler PRTG Network Monitor 23.2.83.1760. Due to command-line parameter injection and an undocumented debug feature flag, an attacker can utilize the HL7 sensor to write arbitrary data to the disk. This can be utilized to write a custom EXE(.bat) sensor, that will then run. This primitive gives remote code execution.","status":"published","published":"2023-08-09T12:30:26Z","modified":"2024-02-01T05:06:42Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-77"],"updated_at":"2026-11-02T14:55:31.245778Z"}],"nvd":[{"id":"CVE-2023-32781","description":"A command injection vulnerability was identified in PRTG 23.2.84.1566 and earlier versions in the HL7 sensor where an authenticated user with write permissions could abuse the debug option to write new files that could potentially get executed by the EXE/Script sensor. The severity of this vulnerability is high and received a score of 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","status":"published","published":"2023-08-09T12:15:10.047Z","modified":"2026-06-17T05:59:33.793Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-77"],"updated_at":"2026-11-02T14:08:22.812138Z"}]}}