CVE-2018-5777

Name of the Vulnerable Software and Affected Versions: Ipswitch WhatsUp Gold versions prior to 2017 Plus SP1 (17.1.1)

Description: An issue was discovered that allows remote clients to take advantage of a misconfiguration in the TFTP server, potentially enabling attackers to execute arbitrary commands on the TFTP server via unspecified vectors.

Recommendations: For Ipswitch WhatsUp Gold versions prior to 2017 Plus SP1 (17.1.1), update to version 2017 Plus SP1 (17.1.1) or later to resolve the issue. As a temporary workaround, consider restricting access to the TFTP server to minimize the risk of exploitation.