CVE-2023-45858

Awaiting Analysis Awaiting Analysis - Queue

Directory Traversal in Paessler PRTG Network Monitor

Publication date: 2026-09-14

Last updated on: 2026-09-22

Assigner: MITRE

Description

A directory traversal was identified in Paessler PRTG before 23.4.88.1429 that made it possible to read local files.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-14

Last Modified

2026-09-22

Generated

2026-10-04

AI Q&A

2026-09-14

EPSS Evaluated

2026-10-03

NVD

CVE-2023-45858

EUVD

EUVD-2023-60668

Affected Vendors & Products

Vendor	Product	Version / Range
paessler	prtg	to 23.4.88.1429 (exc)
paessler	prtg	23.4.88.1429

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-23	The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize sequences such as ".." that can resolve to a location that is outside of that directory.

Attack-Flow Graph

Executive Summary

CVE-2023-45858 is a directory traversal vulnerability in Paessler PRTG before version 23.4.88.1429. It allows unauthorized reading of local files on the system by exploiting a flaw in the PRTG Webserver. The vulnerability can be triggered without authentication.

Detection Guidance

To detect this vulnerability, check if your PRTG version is below 23.4.88.1429. The vulnerability allows unauthenticated path traversal in the PRTG Webserver. Verify the installed version via the PRTG web interface or logs. If vulnerable, update to PRTG 23.4.88.1429 or later immediately.

Impact Analysis

This vulnerability could allow attackers to access sensitive files on the system where PRTG is installed. This may lead to data breaches, unauthorized information disclosure, or further exploitation of the affected system.

Compliance Impact

This vulnerability could allow unauthorized access to local files, potentially exposing sensitive data. This may impact compliance with GDPR and HIPAA by increasing the risk of data breaches and unauthorized data access.

Mitigation Strategies

Update PRTG to version 23.4.88.1429 or later to address the path traversal vulnerability. Apply the hotfix release provided by Paessler to fix the issue.

Hi! I’m here to help you understand CVE-2023-45858. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70