WhatsUp Gold, a widely used network monitoring software, recently identified six critical vulnerabilities that could allow attackers to access unauthorized networks.
The vulnerabilities affect versions below 24.0.1, and users are urged to upgrade immediately to ensure their systems are secure.
The vulnerabilities were disclosed in the WhatsUp Gold Security Bulletin for September 2024.
According to the researchers, these security flaws can potentially enable attackers to exploit the system and access sensitive network information without authorization.
Free Webinar on How to Protect Small Businesses Against Advanced Cyberthreats -> Free Registration
The vulnerabilities have been assigned Common Vulnerabilities and Exposures (CVE) identifiers, each with a high Common Vulnerability Scoring System (CVSS) score, indicating their severity.
| CVE ID | CVSS Score | Credit |
| CVE-2024-46908 | 8.8 | Sina Kheirkhah (@SinSinology) of Summoning Team |
| CVE-2024-46907 | 8.8 | Sina Kheirkhah (@SinSinology) of Summoning Team |
| CVE-2024-46906 | 8.8 | Sina Kheirkhah (@SinSinology) of Summoning Team |
| CVE-2024-46905 | 8.8 | Sina Kheirkhah (@SinSinology) of Summoning Team |
| CVE-2024-46909 | 9.8 | Andy Niu of Trend Micro |
| CVE-2024-8785 | 9.8 | Tenable |
WhatsUp Gold has released version 24.0.1 on September 20, 2024, which addresses these vulnerabilities.
Customers are strongly advised to download and install this latest version as soon as possible to protect their networks from potential breaches.
The company has provided detailed instructions on performing the upgrade and offers support through its professional services team for any assistance.
Security experts emphasize the importance of keeping software up-to-date to mitigate risks associated with such vulnerabilities.
These types of vulnerabilities can have serious implications if not addressed promptly,” said a cybersecurity analyst at Trend Micro.
Organizations should prioritize upgrading their systems and ensure robust security measures are in place.
WhatsUp Gold has reiterated its commitment to customer security by leveraging development practices to minimize product vulnerabilities and promptly notify users of potential risks.
Analyse AnySuspicious Links Using ANY.RUN's New Safe Browsing Tool: Try It for Free
NSA, CISA, and NIST have released joint security guidelines to help organizations detect, contain, and…
Hackers are exploiting a command injection flaw in SiteGuard Server Edition, a web application firewall…
A newly registered domain copies Microsoft Teams’ login page and interface, raising concerns about a…
A 16-year-old flaw in Broadcom’s Wi-Fi software can let attackers within wireless range take control…
Google has announced a new set of Android security protections designed to stop mobile scams…
Hackers are exploiting flaws in Plex Media Server to install cryptocurrency mining malware, with a…