CVE-2018-5777: Critical severity Ipswitch WhatsUp Gold vulnerability
An issue was discovered in Ipswitch WhatsUp Gold before 2017 Plus SP1 (17.1.1). Remote clients can take advantage of a misconfiguration in the TFTP server that could allow attackers to execute arbitrary commands on the TFTP server via unspecified vectors.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Ipswitch WhatsUp Goldto a version that resolves this vulnerability.Fixed in 2017 Plus SP1 (17.1.1)
Event History
Frequently Asked Questions
What is the severity of CVE-2018-5777?
The severity of CVE-2018-5777 is critical with a score of 9.8.
How can remote clients exploit CVE-2018-5777?
Remote clients can exploit CVE-2018-5777 by taking advantage of a misconfiguration in the TFTP server.
What can attackers do if they exploit CVE-2018-5777?
If attackers exploit CVE-2018-5777, they can execute arbitrary commands on the TFTP server.
Which software versions are affected by CVE-2018-5777?
Ipswitch WhatsUp Gold versions up to and exclusive of 17.1.1 are affected by CVE-2018-5777.
Where can I find more information about CVE-2018-5777?
You can find more information about CVE-2018-5777 in the release notes for Ipswitch WhatsUp Gold 2017 Plus SP1.