CVE-2024-4885criticalunder attackCWE-22

CVE-2024-4885: critical vulnerability in Progress Software Corporation WhatsUp Gold

WhatsUp Gold GetFileWithoutZip Directory Traversal Remote Code Execution Vulnerability

Published · Updated

Follow this CVE+ Monitor WhatsUp Gold

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

100Vexday Risk Score

Patch now. It under exploitation confirmed by CISA, has an official Brazilian government alert and has a working public exploit.

ssvc Actcvss 9.8epss 99%
from disclosure to weapon13 days
Published on NVDJun 25
1st PoC+13d
CISA KEV+251d
Official alert in Brazil

Brazil's federal government published an alert, recommendation or bulletin that cites this vulnerability.

  • CTIR Gov · ALERTA 12/2024Vulnerabilidade crítica no produto Progress WhatsUp Goldread on gov.br ↗
Source: CTIR Gov (GSI) and CISC Gov.br, under the CC BY-ND 3.0 license.
Action required by CISAfederal deadline: 2025-03-24

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

In short

WhatsUp Gold allows attackers to exploit a flaw in the file export feature that lets them run harmful commands on the server without needing to log in. This is critical because it gives attackers complete control of the affected system.

Technical detail

The GetFileWithoutZip method in WhatsUp.ExportUtilities.Export is vulnerable to directory traversal (CWE-22), permitting unauthenticated remote code execution with iisapppool\nmconsole privileges. The vulnerability exploits insufficient path validation in file handling operations, allowing arbitrary command execution on the server.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

In WhatsUp Gold versions released before 2023.1.3, an unauthenticated Remote Code Execution vulnerability in Progress WhatsUpGold.  The WhatsUp.ExportUtilities.Export.GetFileWithoutZip allows execution of commands with iisapppool\nmconsole privileges.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Progress Software Corporation · WhatsUp Gold
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — Progress Software Corporation WhatsUp Gold

In the same product, most dangerous first.

CVE-2024-6670CRITICALWhatsUp Gold HasErrors SQL Injection Authentication Bypass VulnerabilityEPSS 92.9%KEVCVE-2024-5010HIGHWhatsUp Gold TestController multiple information disclosure vulnerabilitiesEPSS 70.0%CVE-2024-4883CRITICALWhatsUp Gold WriteDataFile Directory Traversal Remote Code Execution VulnerabilityEPSS 64.5%CVE-2024-46909CRITICALWhatsUp Gold WriteDataFile Directory Traversal Remote Code Execution VulnerabilityEPSS 48.9%CVE-2024-5011HIGHWhatsUp Gold TestController Chart denial of service vulnerabilityEPSS 47.1%CVE-2024-12105MEDIUMWhatsUp Gold - SnmpExtendedActiveMonitor path traversalEPSS 41.7%