PT-2018-17140 · Ipswitch · Ipswitch Whatsup Gold

Vyacheslav Moskvin · Published 2018-01-24 · Updated 2024-08-27 · CVE-2018-5777

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Ipswitch WhatsUp Gold versions prior to 2017 Plus SP1 (17.1.1)

Description: An issue was discovered that allows remote clients to take advantage of a misconfiguration in the TFTP server, potentially enabling attackers to execute arbitrary commands on the TFTP server via unspecified vectors.

Recommendations: For Ipswitch WhatsUp Gold versions prior to 2017 Plus SP1 (17.1.1), update to version 2017 Plus SP1 (17.1.1) or later to resolve the issue. As a temporary workaround, consider restricting access to the TFTP server to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2018-5777

Affected Products

Ipswitch Whatsup Gold

References · 4

• https://osv.dev/vulnerability/CVE-2018-5777 · Vendor Advisory
• https://docs.ipswitch.com/NM/WhatsUpGold2017Plus/01_ReleaseNotes/17PlusSP1/#link4 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-5777 · Security Note
• https://t.me/cvenotify/92362 · Telegram Post