CVE-2018-5777

Severity: critical (CVSS 9.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-01-24 · updated 2026-06-17

Description

An issue was discovered in Ipswitch WhatsUp Gold before 2017 Plus SP1 (17.1.1). Remote clients can take advantage of a misconfiguration in the TFTP server that could allow attackers to execute arbitrary commands on the TFTP server via unspecified vectors.

Affected products

Progress Software Corporation WhatsUp Gold: before 17.1.1 — fixed in 17.1.1

How to fix

Upgrade to a fixed version: Progress Software Corporation WhatsUp Gold 17.1.1. Check the vendor advisory for mitigations.

References

https://docs.ipswitch.com/NM/WhatsUpGold2017Plus/01_ReleaseNotes/17PlusSP1/#link4
https://docs.ipswitch.com/NM/WhatsUpGold2017Plus/01_ReleaseNotes/17PlusSP1/#link4

Get alerted when CVE-2018-5777 or the next vulnerability affects your stack