Actively exploited in the wild
Paessler PRTG Network Monitor Local File Inclusion Vulnerability
Paessler - PRTG Network Monitor · Listed in the CISA KEV since 2025-02-04. This indicates confirmed attacks in production environments.
Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
CVE-2018-19410
CriticalCVSS 9.8KEVSummary
PRTG Network Monitor before 18.2.40.1683 allows remote unauthenticated attackers to create users with read-write privileges (including administrator). A remote unauthenticated user can craft an HTTP request and override attributes of the 'include' directive in /public/login.htm and perform a Local File Inclusion attack, by including /api/addusers and executing it. By providing the 'id' and 'users' parameters, an unauthenticated attacker can create a user with read-write privileges (including administrator).
Risk Assessment
An unauthenticated attacker can gain full control over the monitoring system, potentially leading to data theft, configuration modification, and disruption of monitoring operations.
Recommendation
Upgrade PRTG Network Monitor to version 18.2.40.1683 or later. Restrict access to the management interface to trusted networks only.
Other vulnerabilities in PRTG Network Monitor
See allOriginal NVD description (English source)
PRTG Network Monitor before 18.2.40.1683 allows remote unauthenticated attackers to create users with read-write privileges (including administrator). A remote unauthenticated user can craft an HTTP request and override attributes of the 'include' directive in /public/login.htm and perform a Local File Inclusion attack, by including /api/addusers and executing it. By providing the 'id' and 'users' parameters, an unauthenticated attacker can create a user with read-write privileges (including administrator).