post/windows/gather/credentials/whatsupgold_credential_dump

PoC

WhatsUp Gold Credentials Dump

view exploit source metasploittype postpublished 2022-11-22catalog metasploit
01

exploited CVEs (4)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2022-29848USmedium6.5Exploit
In Progress Ipswitch WhatsUp Gold 17.0.0 through 21.1.1, and 22.0.0, it is possible for an authenticated user to invoke an API transaction that would allow them to read sensitive o…
CVE-2022-29847UShigh7.5Exploit
In Progress Ipswitch WhatsUp Gold 21.0.0 through 21.1.1, and 22.0.0, it is possible for an unauthenticated attacker to invoke an API transaction that would allow them to relay encr…
CVE-2022-29846USmedium5.3Exploit
In Progress Ipswitch WhatsUp Gold 16.1 through 21.1.1, and 22.0.0, it is possible for an unauthenticated attacker to obtain the WhatsUp Gold installation serial number.
CVE-2022-29845USmedium6.5Exploit
In Progress Ipswitch WhatsUp Gold 21.1.0 through 21.1.1, and 22.0.0, it is possible for an authenticated user to invoke an API transaction that would allow them to read the content…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan