CWE Code: 78
Vulnerability Type: privilege_escalation
CVSS Score: 9.0
CWE Name:  Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Summary: an issue was discovered in prtg network monitor before 18.2.39. an attacker who has access to the prtg system administrator web console with administrative privileges can exploit an os command injection vulnerability (both on the server and on devices) by sending malformed parameters in sensor or notification management scenarios.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2018-07-02
Last Modified Date: 2019-03-13