PT-2024-9449 · Ipswitch · Whatsup Gold

Tenable · Published 2024-08-16 · Updated 2024-12-09 · CVE-2024-8785

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: WhatsUp Gold versions prior to 2024.0.1

Description: A remote unauthenticated attacker could leverage NmAPI.exe to create or change an existing registry value in the registry path HKEY LOCAL MACHINESOFTWAREWOW6432NodeIpswitch. This could allow an attacker to execute arbitrary code. The vulnerability is related to errors in the use of privileged application programming interfaces (API).

Recommendations: For versions prior to 2024.0.1, update to version 2024.0.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the NmAPI.exe to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-648

Related Identifiers

BDU:2024-11149

CVE-2024-8785

Affected Products

Whatsup Gold

References · 34

• https://community.progress.com/s/article/WhatsUp-Gold-Security-Bulletin-September-2024 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-11149 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-8785 · Security Note
• https://osv.dev/vulnerability/CVE-2024-8785 · Vendor Advisory
• https://twitter.com/DCWebGuy/status/1864301154970071534 · Twitter Post
• https://twitter.com/helpnetsecurity/status/1864268968195711465 · Twitter Post
• https://twitter.com/vFeed_IO/status/1864069278070378920 · Twitter Post
• https://twitter.com/CCBalert/status/1864323827645182020 · Twitter Post
• https://twitter.com/Dinosn/status/1864518585021857948 · Twitter Post
• https://twitter.com/CveFindCom/status/1863599990687293451 · Twitter Post
• https://twitter.com/the_yellow_fall/status/1839485347144896949 · Twitter Post
• https://twitter.com/pravin_karthik/status/1864511746657988729 · Twitter Post
• https://t.me/nekaspersky/4037 · Telegram Post
• https://t.me/secharvester/17637 · Telegram Post
• https://twitter.com/riskigy/status/1864431745019334736 · Twitter Post