CVE-2024-8785

—

CVSS 3.1

5.3 medium

EPSS

10%p95

Published

Dec 2, 2024 (Dec 2, 2024)

Modified

Jun 17, 2026

Description

In WhatsUp Gold versions released before 2024.0.1, a remote unauthenticated attacker could leverage NmAPI.exe to create or change an existing registry value in registry path HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Ipswitch\.

Vendors: progress
Products: whatsup gold
Weakness: CWE-648
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (9.5%)

In the news4 stories

Week in review: Veeam Service Provider Console flaws fixed, Patch Tuesday forecast

Help Net SecurityDec 8, 00:00 UTC · Dec 8, 2024Vulnerability CVE-2024-42448 CVE-2024-42449 CVE-2024-41713+1 CVEs

Progress Software Releases Patches for 6 Flaws in WhatsUp Gold

The Hacker NewsDec 4, 04:30 UTC · Dec 4, 2024Vulnerability in the wildCVE-2024-46905 CVE-2024-46906 CVE-2024-46907+4 CVEs

PoC exploit for critical WhatsUp Gold RCE vulnerability released (CVE-2024-8785)

Help Net SecurityDec 4, 00:00 UTC · Dec 4, 2024Exploit / PoC CVE-2024-8785

Progress Software fixed 2 new critical flaws in WhatsUp Gold

Security AffairsSep 29, 07:43 UTC · Sep 29, 2024Exploit / PoC in the wildCVE-2024-8785 CVE-2024-46909 CVE-2024-46905+4 CVEs