CVE-2018-5777

CRITICAL 9.8CVE-2018-5777 · Published 24/01/2018 · updated 17/06/2026

In short

CVE-2018-5777 is a CRITICAL (CVSS 9.8) vulnerability affecting whatsup gold (progress).
Chance of exploitation in the next 30 days (EPSS): 1.7%, higher than 77.2% of all vulnerabilities.
Fix: update to 17.1.1 or later.

Package	Affected versions	Patched versions
whatsup gold progress	`< 17.1.1`	`17.1.1`

Description

An issue was discovered in Ipswitch WhatsUp Gold before 2017 Plus SP1 (17.1.1). Remote clients can take advantage of a misconfiguration in the TFTP server that could allow attackers to execute arbitrary commands on the TFTP server via unspecified vectors.

References

docs.ipswitch.com/NM/WhatsUpGold2017Plus/01_ReleaseNotes/17PlusSP1 · Release Notes

More vulnerabilities in whatsup gold

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

whatsup gold

progress

< 17.1.1

17.1.1

More vulnerabilities in whatsup gold

See all →