{"id":"CVE-2024-4885","kind":"vulnerability","aliases":["CVE-2024-4885"],"related":[],"title":"progress whatsup gold: In WhatsUp Gold versions released before 2023.1.3, an unauthenticated Remote Code Execution vulnerability in…","description":"Progress WhatsUp Gold contains a path traversal vulnerability that allows an unauthenticated attacker to achieve remote code execution.\n\nCISA required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","summary":"Progress WhatsUp Gold, a network monitoring product, has a path traversal flaw that lets an unauthenticated remote attacker reach files outside the intended directory. The sources say this leads to remote code execution, and CISA lists it as actively exploited.","severity":"critical","cvss":9.8,"epss":null,"exploited":true,"exploited_at":"2025-03-03T00:00:00+00:00","products":[{"name":"progress whatsup gold","fixed":["23.1.3"],"affected":"< 23.1.3","ecosystem":"vendor"},{"name":"Progress WhatsUp Gold","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["exploited","other","self-hosted","whatsup-gold","windows"],"not_affected_if":["unknown"],"how_to_check":null,"fix":"Apply the vendor's mitigations per CISA guidance, or discontinue use of the product if mitigations are unavailable. Fixed version: unknown","status":"open","published_at":"2024-06-25T20:15:12+00:00","first_seen_at":"2026-10-23T19:11:51+00:00","triaged_at":"2026-10-23T20:52:20+00:00","updated_at":"2026-10-24T00:09:50+00:00","category":"other","confidence":0.7,"triage":{"at":"2026-10-23T20:52:20Z","model":"claude-haiku-5-5","output":{"fix":"Apply the vendor's mitigations per CISA guidance, or discontinue use of the product if mitigations are unavailable. Fixed version: unknown","reach":"internet","impact":"high","summary":"Progress WhatsUp Gold, a network monitoring product, has a path traversal flaw that lets an unauthenticated remote attacker reach files outside the intended directory. The sources say this leads to remote code execution, and CISA lists it as actively exploited.","category":"other","who_cares":["whatsup-gold","self-hosted","windows"],"confidence":0.7,"needs_auth":"no","worst_case":"Unauthenticated attacker runs code on the WhatsUp Gold server","analyst_note":"Find the vendor advisory and affected/fixed version range, plus a file or setting to check, via the KEV entry and Progress security bulletins.","how_to_check":"unknown","needs_analyst":true,"not_affected_if":["unknown"],"user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"critical"},"cost_usd":0.000447,"input_tokens":2649,"output_tokens":364,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-01':108C '-2024':18A,21A '-4885':19A,22A '2023.1.3':10A '22':107C 'achiev':92C 'action':98C 'activ':76B 'allow':87C 'appli':99C 'applic':105C 'attack':55B,90C 'bod':106C 'cisa':72B,96C 'cloud':111C 'code':14A,69B,94C 'contain':81C 'cve':17A,20A 'directori':61B 'discontinu':114C 'execut':15A,70B,95C 'exploit':29B,77B 'file':57B 'flaw':49B 'follow':104C 'gold':3A,6A,25A,28A,36B,40B,80C 'guidanc':109C 'host':33B 'instruct':103C 'intend':60B 'lead':66B 'let':51B 'list':73B 'mitig':100C,120C 'monitor':43B 'network':42B 'outsid':58B 'path':47B,83C 'per':101C 'product':44B,118C 'progress':1A,23A,26A,38B,78C 'reach':56B 'releas':8A 'remot':13A,54B,68B,93C 'requir':97C 'say':64B 'self':32B 'self-host':31B 'servic':112C 'sourc':63B 'travers':48B,84C 'unauthent':12A,53B,89C 'unavail':122C 'use':115C 'vendor':102C 'version':7A 'vulner':16A,85C 'whatsup':2A,5A,24A,27A,35B,39B,79C 'whatsup-gold':34B 'window':37B","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2024-06-25T20:15:12+00:00","kev":{"dateAdded":"2025-03-03","dueDate":"2025-03-24","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","knownRansomwareCampaignUse":"Unknown"},"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss_by":"security@progress.com","poc_count":0,"sources":[{"source":"kev","external_id":"CVE-2024-4885","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-4885","severity":null,"published_at":"2025-03-03T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-23T19:11:51+00:00","fetched_at":"2026-10-25T11:39:14+00:00","note":null},{"source":"nvd","external_id":"CVE-2024-4885","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-4885","severity":null,"published_at":"2024-06-25T20:15:12+00:00","modified_at":"2026-06-17T08:03:06+00:00","first_seen_at":"2026-10-23T22:29:05+00:00","fetched_at":"2026-10-23T22:29:05+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}