ZOHO ManageEngine Device Control Plus is a USB device control software from ZOHO, Inc. ZOHO ManageEngine Device Control Plus version 10.1.2228.15 contains a security vulnerability that stems from the ability to bypass USB restrictions by using a virtual machine (VM). An attacker could use the vulnerability to exchange files outside of the laptop or system.