CVE-2018-19410

Deeper analysis AI-assisted summary

Synthesised by an AI model from the NVD description and linked references — a reading aid, not an authoritative source.

PRTG Network Monitor versions prior to 18.2.40.1683 contain a vulnerability that permits remote unauthenticated attackers to create users possessing read-write privileges, including full administrator accounts. The flaw stems from improper handling of the include directive within the /public/login.htm page, which can be manipulated to perform local file inclusion of the /api/addusers endpoint.

An attacker can exploit the issue by sending a crafted HTTP request that overrides the include directive and supplies the id and users parameters to the API endpoint, resulting in immediate creation of a privileged account. No authentication or user interaction is required, and the attack can be carried out over the network with minimal complexity.

Public references from Positive Technologies detail the technical root cause and confirm the affected versions, while CISA lists the CVE in its catalog of known exploited vulnerabilities, underscoring the need to apply the vendor patch that introduced the fixed release.