Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2024-8785

WhatsUp Gold Registry Overwrite Remote Code Execution Vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
ProgressSoftware

Description

In WhatsUp Gold versions released before 2024.0.1, a remote unauthenticated attacker could leverage NmAPI.exe to create or change an existing registry value in registry path HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Ipswitch\.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Progress Software Corporation WhatsUp Gold

Default version status: affected

  • 2023.1.0 to < 2024.0.1affected

References