CVE-2022-42711

In Progress WhatsUp Gold before 22.1.0, an SNMP MIB Walker application endpoint failed to adequately sanitize malicious input

Critical · published October 12, 2022

CVSS v3.1
9.6
EPSS
1%
Percentile
71.4
In the wild
Unconfirmed
What it is

🚨 A failure to sanitize input in WhatsUp Gold could let an attacker run arbitrary code in your browser, and that’s a recipe for disaster! 🔥 Think of it like a restaurant with an open kitchen — if the chef doesn’t check the ingredients, someone could slip in a dangerous spice that turns a delightful meal into a health hazard. 😱 An attacker could exploit this vulnerability to execute malicious scripts, potentially stealing sensitive data or taking control of your system. This isn't just a minor inconvenience; it could lead to complete system compromise and loss of trust!

Put simply

Think of it like a restaurant with an open kitchen — if the chef doesn’t check the ingredients, someone could slip in a dangerous spice that turns a delightful meal into a health hazard. 😱 The SNMP MIB Walker application endpoint in WhatsUp Gold before version 22.1.0 does not properly sanitize user input, allowing attackers to inject malicious code that runs in the context of the victim's browser.

What to do

An attacker could exploit this vulnerability to execute malicious scripts, potentially stealing sensitive data or taking control of your system. This isn't just a minor inconvenience; it could lead to complete system compromise and loss of trust! Upgrade to WhatsUp Gold version 22.1.0 or later immediately. Additionally, review your security policies to ensure all inputs are properly validated to avoid similar issues in the future. You've got this! Take these steps, and you'll be protecting your systems in no time! 🛡️

The record
Technical detail
CVSS v3.1
9.6 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01355 · 71.4th percentile
Published
2022-10-12T00:00Z
EPSS history
Timeline
  • 12 OCT 00:00Z
    In Progress WhatsUp Gold before 22.1.0, an SNMP MIB Walker application endpoint failed to adequately sanitize malicious input
    cvelistv5