← Database

CVE-2024-8785

CRITICAL CVSS: 9.8 Published: 2024-12-02 Modified: 2026-06-17

Description

In WhatsUp Gold versions released before 2024.0.1, a remote unauthenticated attacker could leverage NmAPI.exe to create or change an existing registry value in registry path HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Ipswitch\.

Affected Platforms

Progress Whatsup Gold

Weakness Type

CWE-648, NVD-CWE-noinfo

References