CVE-2018-8938

A Code Injection issue was discovered in DlgSelectMibFile.asp in Ipswitch WhatsUp Gold before 2018 (18.0). Malicious actors can inject a specially crafted SNMP MIB file that could allow them to execute arbitrary commands and code on the WhatsUp Gold server.

Date published : 2018-05-01

https://docs.ipswitch.com/NM/WhatsUpGold2018/01_ReleaseNotes/index.htm