HIGH

CVE-2023-32781

CVSS v3

7.2

HIGH

EPSS Score

47.4%

exploit probability

CISA KEV

No

known exploited

Exploitation

SSVC status

Description

A command injection vulnerability was identified in PRTG 23.2.84.1566 and earlier versions in the HL7 sensor where an authenticated user with write permissions could abuse the debug option to write new files that could potentially get executed by the EXE/Script sensor. The severity of this vulnerability is high and received a score of 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Technical details

Published
8/9/2023

Frequently asked questions

What is CVE-2023-32781?

A command injection vulnerability was identified in PRTG 23.2.84.1566 and earlier versions in the HL7 sensor where an authenticated user with write permissions could abuse the debug option to write new files that could potentially get executed by the EXE/Script sensor. The severity of this vulnerability is high and received a score of 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Is CVE-2023-32781 actively exploited?

Active exploitation of CVE-2023-32781 has not been confirmed. The EPSS score is 47.4%, indicating the estimated probability of exploitation in the next 30 days.

What is the CVSS score for CVE-2023-32781?

CVE-2023-32781 has a CVSS v3 base score of 7.2 (HIGH severity).

Is CVE-2023-32781 affecting your environment?

Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.