What’s Vulnerable › Vulnerabilities

CVE-2020-11547

• Severity: medium (CVSS 5.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 52.1% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2020-04-05 · updated 2026-06-17
• Weakness: CWE-306

Description

PRTG Network Monitor before 20.1.57.1745 allows remote unauthenticated attackers to obtain information about probes running or the server itself (CPU usage, memory, Windows version, and internal statistics) via an HTTP request, as demonstrated by type=probes to login.htm or index.htm.

Affected products

• Paessler PRTG: before 20.1.57.1745 — fixed in 20.1.57.1745

How to fix

Upgrade to a fixed version: Paessler PRTG 20.1.57.1745. Check the vendor advisory for mitigations.

References

• https://github.com/ch-rigu/PRTG-Network-Monitor-Information-Disclosure
• https://github.com/ch-rigu/PRTG-Network-Monitor-Information-Disclosure

Get alerted when CVE-2020-11547 or the next vulnerability affects your stack