CVE-2025-2572CWE-287

WhatsUp Gold NmConfigurationManager.exe database manipulation vulnerability

Medium · published April 14, 2025

CVSS v3.1
5.6
EPSS
0%
Percentile
16.8
In the wild
Unconfirmed
What it is

In WhatsUp Gold versions released before 2024.0.3, a

database manipulation

vulnerability allows an unauthenticated attacker to modify the contents of WhatsUp.dbo.WrlsMacAddressGroup.

The record
Technical detail
CVSS v3.1
5.6 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00260 · 16.8th percentile
Weakness
CWE-287 · Improper Authentication
Published
2025-04-14T16:06Z
EPSS history
Timeline
  • 14 APR 16:06Z
    WhatsUp Gold NmConfigurationManager.exe database manipulation vulnerability
    cvelistv5