WhatsUp Gold - SQLi (CVE-2024-6670)
Description
In WhatsUp Gold versions released before 2024.0.0, a SQL Injection vulnerability allows an unauthenticated attacker to retrieve the users encrypted password.
psychologyCrowdSec Analysis
CVE-2024-6670 is a critical vulnerability in WhatsUp Gold that allows unauthenticated attackers to perform SQL injection to retrieve encrypted user passwords.
CrowdSec has been tracking this vulnerability and its exploits since 9th of October 2024.
CrowdSec network data shows that most actors exploiting CVE-2024-6670 rely on broad, untargeted scans with minimal filtering. The activity is largely automated and opportunistic in nature. Additionally, according to week-over-week analysis by CrowdSec, exploitation of CVE-2024-6670 is surging. Attack volumes are spiking well above historical norms, indicating widespread and escalating interest from threat actors. CVE-2024-6670 is currently experiencing high visibility and active exploitation across the internet.
Exploit attempts typically involve requests to URLs containing /nmconsole/platform/performancemonitorerrors/haserrors.
Full Intelligence Available
Connect your API key to access CrowdSec scores, exploit timelines, and attacker IPs.
| Event | Date |
|---|---|
| CVE Published | 2024-08-29 |
| CISA KEV | 2024-09-16 |
| CISA Remediation Deadline | 2024-10-07 |
| Rule Released | 2024-10-09 |
| CrowdSec First Seen | 2024-11-23 |