CVE-2018-19410 : What You Need to Know

PRTG Network Monitor before version 18.2.40.1683 is vulnerable to unauthorized user creation, potentially granting administrator access.

Understanding CVE-2018-19410

This CVE describes a vulnerability in PRTG Network Monitor that allows remote unauthenticated attackers to create users with escalated privileges.

What is CVE-2018-19410?

PRTG Network Monitor prior to version 18.2.40.1683 is susceptible to a security flaw that enables attackers to generate users with read-write permissions, potentially including administrator privileges. The vulnerability arises from improper handling of HTTP requests that can be manipulated to execute a Local File Inclusion attack.

The Impact of CVE-2018-19410

The exploitation of this vulnerability can lead to the unauthorized creation of users with elevated privileges, posing a significant security risk to affected systems. Attackers could potentially gain full administrator access through this exploit.

Technical Details of CVE-2018-19410

This section provides more in-depth technical insights into the vulnerability.

Vulnerability Description

The vulnerability in PRTG Network Monitor allows remote unauthenticated attackers to manipulate HTTP requests to create users with escalated privileges by exploiting a Local File Inclusion vulnerability.

Affected Systems and Versions

Product: PRTG Network Monitor
Versions affected: All versions before 18.2.40.1683

Exploitation Mechanism

Attackers can exploit this vulnerability by manipulating the 'include' directive in the /public/login.htm file and executing the /api/addusers file, providing the necessary parameters to create a user with unauthorized privileges.

Mitigation and Prevention

Protecting systems from CVE-2018-19410 requires immediate actions and long-term security practices.

Immediate Steps to Take

Update PRTG Network Monitor to version 18.2.40.1683 or later to mitigate the vulnerability.
Monitor user accounts for any unauthorized changes.

Long-Term Security Practices

Implement strong access controls and authentication mechanisms.
Regularly audit and review user permissions to prevent unauthorized access.

Patching and Updates

Apply security patches and updates provided by the vendor to address known vulnerabilities and enhance system security.