← Back

CVE-2024-8785

nvd nist
Published: Dec 2, 2024Modified: Jun 17, 2026

JSON object

Loading...
5.3
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Exploitability: 3.9 / Impact: 1.4
Source: NVD

Description

In WhatsUp Gold versions released before 2024.0.1, a remote unauthenticated attacker could leverage NmAPI.exe to create or change an existing registry value in registry path HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Ipswitch\.

Affected (1)

Progress
1 product
Whatsup Gold
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Whatsup Gold
Before 24.0.1

Related CWEs

CWE-648
Incorrect Use of Privileged APIs
The product does not conform to the API requirements for a function call that requires extra privileges. This could allow attackers to gain privileges by causing the function to be called incorrectly.

References (3)

Source: security@progress.com
Vendor Advisory
Source: security@progress.com
Release Notes
Source: security@progress.com
Product

Timeline

No history available yet.