Unscored CVE-2018-8938 EUVD-2018-20546GHSA-4rwx-v4ch-c62r

A Code Injection issue was discovered in DlgSelectMibFile.asp in Ipswitch WhatsUp Gold before 2018 (18.0). Malicious actors can inject a sp…

Published May 1, 2018 · Updated Aug 5, 2024 · Assigned by mitre

Description

A Code Injection issue was discovered in DlgSelectMibFile.asp in Ipswitch WhatsUp Gold before 2018 (18.0). Malicious actors can inject a specially crafted SNMP MIB file that could allow them to execute arbitrary commands and code on the WhatsUp Gold server.

References

https://docs.ipswitch.com/NM/WhatsUpGold2018/01_ReleaseNotes/index.htm