CVE-2025-2572

MEDIUM

Progress Whatsup Gold < 24.0.3 - Authentication Bypass

Title source: rule

Description

In WhatsUp Gold versions released before 2024.0.3, a database manipulation vulnerability allows an unauthenticated attacker to modify the contents of WhatsUp.dbo.WrlsMacAddressGroup.

References (2)

[Release Notes] https://docs.progress.com/bundle/whatsupgold-release-notes-24-0/page/WhatsUp-Gold-2024.0-Release-Notes.html

[Product] https://www.progress.com/network-monitoring

Scores

CVSS v3 5.6

EPSS 0.0002

EPSS Percentile 5.5%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

Classification

CWE

CWE-287

Status published

Affected Products (1)

progress/whatsup_gold < 24.0.3

Timeline

Published Apr 14, 2025

Tracked Since Feb 18, 2026