PatchSiren

PatchSiren cyber security CVE debrief

CVE-2023-45858 Paessler CVE debrief

A directory traversal vulnerability was identified in Paessler PRTG before 23.4.88.1429, allowing for the reading of local files. This issue is considered high severity with a CVSS score of 8.6. The vulnerability enables an attacker to read local files, potentially leading to unauthorized access. Defenders responsible for Paessler PRTG systems should assess exposure and prioritize patching to prevent potential security incidents. The CVE record and NVD entry provide limited information about the vulnerability.

Vendor
Paessler
Product
PRTG Network Monitor
CVSS
HIGH 8.6
CISA KEV
Not listed in stored evidence
Original CVE published
2026-09-14
Original CVE updated
2026-09-22
Advisory published
2026-09-14
Advisory updated
2026-09-22

Who should care

Defenders responsible for Paessler PRTG systems should assess exposure and prioritize patching to prevent potential unauthorized access to local files.

Why it matters

The CVE-2023-45858 vulnerability in Paessler PRTG allows for directory traversal, enabling an attacker to read local files. Defenders should prioritize verifying exposure and applying the vendor-provided patch to prevent potential security incidents.

  • Verify exposure of Paessler PRTG systems to directory traversal attacks.
  • Assess potential unauthorized access to local files.
  • Prioritize patching to version 23.4.88.1429 or later.
  • Monitor for potential security incidents related to this vulnerability.

Technical summary

The CVE-2023-45858 vulnerability allows for directory traversal in Paessler PRTG before version 23.4.88.1429, enabling an attacker to read local files. The vulnerability has a CVSS score of 8.6 and is considered high severity. It is essential for defenders to verify exposure and apply the vendor-provided patch to prevent potential unauthorized access to local files. The vulnerability can be mitigated by updating to version 23.4.88.1429 or later.

Defensive priority

Defenders should prioritize verifying exposure and applying the vendor-provided patch, if available, to prevent potential unauthorized access to local files.

Recommended defensive actions

  • Verify if the system is running a vulnerable version of Paessler PRTG and apply the patch to version 23.4.88.1429 or later.
  • Review local file access controls and monitor for potential unauthorized access.
  • Consider implementing additional security measures to protect against directory traversal attacks.

Evidence notes

The CVE record and NVD entry provide limited information about the vulnerability, with the vendor providing references to their PRTG version history and support solutions.

Sources and references

Verified primary and authoritative sources

  • CVE-2023-45858 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2023-45858

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2023-45858 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2023-45858

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.