Skip to content
OpenAdvisories
Critical · 9.8 CVE-2024-8785 EUVD-2024-49604GHSA-5wjj-xchx-55wf

WhatsUp Gold Registry Overwrite Remote Code Execution Vulnerability

Published Dec 2, 2024 · Updated Dec 2, 2024 · Assigned by ProgressSoftware

Description

In WhatsUp Gold versions released before 2024.0.1, a remote unauthenticated attacker could leverage NmAPI.exe to create or change an existing registry value in registry path HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Ipswitch\.

Affected products

VendorProductAffectedFixed
Progress Software WhatsUp Gold 2023.1.0 – < 2024.0.1 2024.0.1

References