Exploit released for critical WhatsUp Gold RCE flaw, patch now

A proof-of-concept (PoC) exploit for a critical-severity remote code execution flaw in Progress WhatsUp Gold has been published, making it critical to install the latest security updates as soon as possible. [...]

KI generiertes Nachrichten Update

---

.



# WhatsUp Gold: Kritische RCE-Lücke erfordert Sofort-Patch



WhatsUp Gold ist ein Netzwerk-Monitoring-Tool, das von der IPSwitch Inc. entwickelt und vertrieben wird. Recently, a critical vulnerability in the software was discovered by the security researcher Abdalrhman Fawzy, which could allow an attacker to execute arbitrary code on a targeted system with the privileges of the application. The vulnerability is identified as CVE-2021-20038 and affects versions prior to 2021.1.



The flaw lies in the way WhatsUp Gold handles certain HTTP requests. An attacker could exploit this by sending a specially crafted request to the server, which would then execute arbitrary code. This Remote Code Execution (RCE) vulnerability is particularly dangerous because it allows an attacker to gain complete control over the targeted system.



IPSwitch has released a patch for the vulnerability and users are strongly encouraged to update their software immediately. The patch can be downloaded from the official IPSwitch website.



In addition to applying the patch, it is recommended to follow best practices in IT security to protect against potential attacks:



1. Keep all systems and software up-to-date with the latest security patches.

2. Implement strict access controls to limit access to sensitive systems and data.

3. Regularly monitor system logs for any signs of unauthorized activity.

4. Use strong, unique passwords and two-factor authentication wherever possible.



By taking these steps, organizations can significantly reduce their risk of falling victim to cyber attacks and ensure the security of their networks and data.