CVE-2023-32781 (prtg_network_monitor)

An issue was discovered in Paessler PRTG Network Monitor 23.2.83.1760. Due to command-line parameter injection and an undocumented debug feature flag, an attacker can utilize the HL7 sensor to write arbitrary data to the disk. This can be utilized to write a custom EXE(.bat) sensor, that will then run. This primitive gives remote code execution.

bat code code execution command cve data debug disk feature flag injection issue monitor network network monitor paessler parameter remote code remote code execution run sensor