What’s Vulnerable › Vulnerabilities

CVE-2019-11073

• Severity: high (CVSS 7.2 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 6.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2020-03-16 · updated 2026-06-17
• Weakness: CWE-74

Description

A Remote Code Execution vulnerability exists in PRTG Network Monitor before 19.4.54.1506 that allows attackers to execute code due to insufficient sanitization when passing arguments to the HttpTransactionSensor.exe binary. In order to exploit the vulnerability, remote authenticated administrators need to create a new HTTP Transaction Sensor and set specific settings when the sensor is executed.

Affected products

• Paessler PRTG: before 19.4.54.1506 — fixed in 19.4.54.1506

How to fix

Upgrade to a fixed version: Paessler PRTG 19.4.54.1506. Check the vendor advisory for mitigations.

References

• https://sensepost.com/blog/2019/being-stubborn-pays-off-pt.-1-cve-2018-19204/
• https://www.bsi.bund.de/SharedDocs/Warnmeldungen/DE/CB/2019/11/warnmeldung_cb-k19-1019.html
• https://www.paessler.com/prtg/history/stable
• https://sensepost.com/blog/2019/being-stubborn-pays-off-pt.-1-cve-2018-19204/
• https://www.bsi.bund.de/SharedDocs/Warnmeldungen/DE/CB/2019/11/warnmeldung_cb-k19-1019.html
• https://www.paessler.com/prtg/history/stable

Get alerted when CVE-2019-11073 or the next vulnerability affects your stack