{"id":"CVE-2024-5013","aliases":["EUVD-2024-46285","GHSA-vp43-wpfx-v79m"],"status":"published","title":"WhatsUp Gold InstallController Denial-of-Service Vulnerability","description":"In WhatsUp Gold versions released before 2023.1.3, an unauthenticated Denial of Service \n\nvulnerability was identified. An unauthenticated attacker can put the application into the SetAdminPassword installation step, which renders the application non-accessible.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00847,"percentile":0.58353,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-400"],"published":"2024-06-25T20:11:58Z","modified":"2026-06-17T08:14:54Z","products":[{"vendor":"progress","product":"whatsup_gold"},{"vendor":"progress software corporation","product":"whatsup gold"}],"references":[{"url":"https://www.progress.com/network-monitoring","tags":["product","x_transferred","Product"]},{"url":"https://community.progress.com/s/article/WhatsUp-Gold-Security-Bulletin-June-2024","tags":["vendor-advisory","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-5013"},{"url":"https://github.com/advisories/GHSA-vp43-wpfx-v79m"}],"sources":{"cve":[{"id":"CVE-2024-5013","title":"WhatsUp Gold InstallController Denial-of-Service Vulnerability","description":"In WhatsUp Gold versions released before 2023.1.3, an unauthenticated Denial of Service \n\nvulnerability was identified. An unauthenticated attacker can put the application into the SetAdminPassword installation step, which renders the application non-accessible.","status":"published","published":"2024-06-25T20:11:58.1Z","modified":"2024-08-01T20:55:10.406Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:34:01.630882Z"}],"euvd":[{"id":"EUVD-2024-46285","description":"In WhatsUp Gold versions released before 2023.1.3, an unauthenticated Denial of Service \n\nvulnerability was identified. An unauthenticated attacker can put the application into the SetAdminPassword installation step, which renders the application non-accessible.","status":"published","published":"2024-06-25T20:11:58Z","modified":"2024-08-01T20:55:10Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-03T03:50:35.230694Z"}],"ghsa":[{"id":"GHSA-vp43-wpfx-v79m","title":"In WhatsUp Gold versions released before 2023.1.3, an unauthenticated Denial of Service \n...","description":"In WhatsUp Gold versions released before 2023.1.3, an unauthenticated Denial of Service \n\nvulnerability was identified. An unauthenticated attacker can put the application into the SetAdminPassword installation step, which renders the application non-accessible.","status":"published","published":"2024-06-25T21:31:17Z","modified":"2024-06-25T21:31:18Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:57:31.517228Z"}],"nvd":[{"id":"CVE-2024-5013","description":"In WhatsUp Gold versions released before 2023.1.3, an unauthenticated Denial of Service \n\nvulnerability was identified. An unauthenticated attacker can put the application into the SetAdminPassword installation step, which renders the application non-accessible.","status":"published","published":"2024-06-25T21:16:00.51Z","modified":"2026-06-17T08:14:54.387Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:10:09.388795Z"}]}}