Quick answers
- Is CVE-2023-22632 exploited in the wild?
- No. Junglewise Threat Intelligence has no report of CVE-2023-22632 being exploited in the wild.
- How severe is CVE-2023-22632?
- Low severity, with a CVSS score of 2.7, published 14 September 2026.
- Which products and versions are affected?
- Paessler PRTG Network Monitor before 23.1.82.
- Is there a fix for CVE-2023-22632?
- A patch was published on 2023-05: Fixed in PRTG 23.1.82 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
- How is CVE-2023-22632 attacked?
- It is attacked over the network.
- Am I affected by CVE-2023-22632?
- Check whether you run Paessler PRTG Network Monitor at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.
Technical details
The vulnerability is an arbitrary file write flaw in the FTP Server Count Sensor component of PRTG Network Monitor. The issue requires authentication and allows a privileged or authenticated user to write arbitrary files on the probe system where the sensor runs. The vulnerability was discovered during security testing and affects all versions before 23.1.82. The issue was patched in version 23.1.82 and Paessler recommends updating via the auto-update feature to remediate the vulnerability.
Affected products
- Paessler PRTG Network Monitor before 23.1.82
Timeline
- 2023-05: disclosed: Vulnerability reported and fixed in version 23.1.82
- 2023-05: patched: Fixed in PRTG 23.1.82