Is CVE-2015-7743 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2015-7743 being exploited in the wild.

How severe is CVE-2015-7743?

Medium severity, with a CVSS score of 6.5, published 23 January 2017.

Which products and versions are affected?

Paessler PRTG Network Monitor before 16.2.23.3077/3078.

Is there a fix for CVE-2015-7743?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2015-7743 attacked?

It is attacked over the network, in a network appliance.

Am I affected by CVE-2015-7743?

Check whether you run Paessler PRTG Network Monitor. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2015-7743: Paessler PRTG Network Monitor XXE in HTTP XML/REST Value sensor

CVE-2015-7743 · Severity: medium · CVSS 6.5 · Published 2017-01-23

PRTG Network Monitor is a widely used tool for monitoring the health and performance of IT infrastructure. A security vulnerability in older versions allows an authorized user to read sensitive files from the server hosting the software. This could lead to the exposure of configuration details, credentials, or other private data, potentially allowing an attacker to expand their access within the corporate network.

Technologies: Paessler PRTG Network Monitor. Vendors: Paessler.

Quick answers

Is CVE-2015-7743 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2015-7743 being exploited in the wild.
How severe is CVE-2015-7743?: Medium severity, with a CVSS score of 6.5, published 23 January 2017.
Which products and versions are affected?: Paessler PRTG Network Monitor before 16.2.23.3077/3078.
Is there a fix for CVE-2015-7743?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2015-7743 attacked?: It is attacked over the network, in a network appliance.
Am I affected by CVE-2015-7743?: Check whether you run Paessler PRTG Network Monitor. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

An XML External Entity (XXE) vulnerability exists in the way PRTG Network Monitor processes XML data when creating specific sensor types. Specifically, the 'HTTP XML/REST Value' sensor fails to properly restrict external entity references. A remote authenticated attacker can exploit this by creating a new sensor and pointing it at a maliciously crafted XML file. This allows the attacker to perform an out-of-band data exfiltration or directly read local files on the PRTG server's file system. The issue is resolved in versions 16.2.23.3077 and 16.2.23.3078.

Affected products

Paessler PRTG Network Monitor before 16.2.23.3077/3078

Timeline

2015-10-06: disclosed: CVE reserved date
2017-01-23: advisory: NVD publication date

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.