Paper/Archive/CVE-2024-4885

CVE-2024-4885

Progress Software Corporation WhatsUp Gold — WhatsUp Gold GetFileWithoutZip Directory Traversal Remote Code Execution Vulnerability

KEV · due 24 Mar EPSS 99%public exploit SSVC act CVSS 9.8

critical.is priorityof 100

CVSS 9.8 (CNA)9.8 / 10 × 3029.4 In CISA KEV+3030.0 EPSS percentile 99.9.999 × 2020.0 Exploit: SSVC active+1010.0 SSVC exploitation: active+1010.0

Description · from the CVE record

In WhatsUp Gold versions released before 2023.1.3, an unauthenticated Remote Code Execution vulnerability in Progress WhatsUpGold. The WhatsUp.ExportUtilities.Export.GetFileWithoutZip allows execution of commands with iisapppool\nmconsole privileges.

Affected

ProductAffectedFixed inSource

WhatsUp Gold2023.1.0 – < 2023.1.32023.1.3CNA

whatsup_gold2023.1.0 – < 2023.1.32023.1.3CISA-ADP

Scores by source

ProgressSoftware (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA ADPSSVCExploitation: active · Automatable: yes · Technical impact: total

References

refprogress.com/network-monitoring advisorycommunity.progress.com/s/article/WhatsUp-Gold-Security-Bulletin-June-2024 refcisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-4885 kevcisa.gov/known-exploited-vulnerabilities-catalog