01642 06 11 11 Arrange Call

Unauthenticated Remote Command Execution in Paessler PRTG Network Monitor

CVE-2020-10374 · CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVE-2020-10374

A webserver component in Paessler PRTG Network Monitor 19.2.50 to PRTG 20.1.56 allows unauthenticated remote command execution via a crafted POST request or the what parameter of the screenshot function in the Contact Support form.

Learn more about our Web App Pen Testing.