CVE-2024-8785: WhatsUp Gold Registry Overwrite Remote Code Execution Vulnerability
Published Dec 2, 2024
·Updated
In WhatsUp Gold versions released before 2024.0.1, a remote unauthenticated attacker could leverage NmAPI.exe to create or change an existing registry value in registry path HKEYLOCALMACHINE\SOFTWARE\WOW6432Node\Ipswitch\.
Affected Software
1 affected component
Progress WhatsUp Gold<24.0.1
Event History
Dec 2, 2024
CVE Published
via MITRE·02:49 PM
Data Sourced
via MITRE·02:49 PM
DescriptionSeverityWeakness
Dec 3, 2024
News Published
via BleepingComputer·07:00 PM
News Published
via BleepingComputer·07:01 PM
Frequently Asked Questions
1
What is the severity of CVE-2024-8785?
CVE-2024-8785 is classified as a high-severity vulnerability due to the potential for remote unauthenticated attacks.
2
How do I fix CVE-2024-8785?
To fix CVE-2024-8785, upgrade WhatsUp Gold to version 2024.0.1 or later.
3
What versions of WhatsUp Gold are affected by CVE-2024-8785?
WhatsUp Gold versions prior to 2024.0.1 are affected by CVE-2024-8785.
4
What kind of access does CVE-2024-8785 provide to attackers?
CVE-2024-8785 allows remote unauthenticated attackers to create or modify registry values.
5
Is there a known exploit for CVE-2024-8785?
As of now, there is no publicly reported exploit specifically targeting CVE-2024-8785.