by Kastro
Paper/Archive/CVE-2024-8785

CVE-2024-8785

Progress Software Corporation WhatsUp Gold — WhatsUp Gold Registry Overwrite Remote Code Execution Vulnerability

EPSS 10%CVSS 9.8
critical.is priorityof 100
49
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 95.5.955 × 2019.1No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

In WhatsUp Gold versions released before 2024.0.1, a remote unauthenticated attacker could leverage NmAPI.exe to create or change an existing registry value in registry path HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Ipswitch\.

Affected

ProductAffectedFixed inSource
WhatsUp Gold2023.1.0 – < 2024.0.12024.0.1CNA
whatsup_gold2023.1.0 – < 2024.0.12024.0.1CISA-ADP

Scores by source

ProgressSoftware (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refprogress.com/network-monitoringadvisorycommunity.progress.com/s/article/WhatsUp-Gold-Security-Bulletin-September-2024refdocs.progress.com/bundle/whatsupgold-release-notes-24-0/page/WhatsUp-Gold-2024.0-Release-Notes.html