The flaw appears in the FTP Server Count Sensor component of PRTG before version 23.1.82, permitting an attacker to craft requests that result in arbitrary file creation or modification on the monitored host. Because the file system remains writable, an adversary could potentially create or alter configuration or log files, leading to further exploitation. The weakness maps to CWE‑88 (Resource Conflict or Race Condition).

Paessler PRTG Network Monitor versions earlier than 23.1.82 are affected. The issue originates solely in the FTP Server Count Sensor module. Systems running the sensor without patch remain vulnerable.

The CVSS score of 2.7 indicates low severity. The EPSS score is less than 1%, suggesting a very low chance of exploitation. Although no public exploit is available, the vulnerability permits remote file writes that could serve as a foothold for further compromise, especially if the target has elevated privileges. It is not listed in KEV, so active exploitation is unclear.