CVE-2021-27220 : An issue was discovered in PRTG Network Monitor before 21.1.66.1623. By invoking

An issue was discovered in PRTG Network Monitor before 21.1.66.1623. By invoking the screenshot functionality with prepared context paths, an attacker is able to verify the existence of certain files on the filesystem of the PRTG's Web server.

Published 2021-03-31 22:15:14

Updated 2021-04-06 15:48:32

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2021-27220

Paessler » Prtg Network Monitor
Versions before (<) 21.1.66.1623
cpe:2.3:a:paessler:prtg_network_monitor:*:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2021-27220

EPSS FAQ

0.08%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 35 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2021-27220

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
5.0	MEDIUM	AV:N/AC:L/Au:N/C:P/I:N/A:N	10.0	2.9	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: None Availability Impact: None
5.3	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N	3.9	1.4	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: Low Integrity: None Availability: None

References for CVE-2021-27220

https://www.paessler.com/prtg/history/stable#21.1.66.1623

PRTG Network Monitor - Version History
Release Notes;Vendor Advisory

Jump to

Vulnerability Details : CVE-2021-27220

Products affected by CVE-2021-27220

Exploit prediction scoring system (EPSS) score for CVE-2021-27220

CVSS scores for CVE-2021-27220

References for CVE-2021-27220