Lucene search

[email protected]NVD:CVE-2022-40770

HistoryNov 23, 2022 - 3:15 a.m.

CVE-2022-40770

2022-11-2303:15:10

CWE-77

[email protected]

web.nvd.nist.gov

cve-2022-40770

zoho manageengine

servicedesk plus

authenticated command injection

high-privileged users

CVSS3

7.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS

0.002

Percentile

57.3%

JSON

Zoho ManageEngine ServiceDesk Plus versions 13010 and prior are vulnerable to authenticated command injection. This can be exploited by high-privileged users.

Affected configurations

Nvd

Node

zohocorpmanageengine_servicedesk_plusRange<13.0

zohocorpmanageengine_servicedesk_plusMatch13.013000

zohocorpmanageengine_servicedesk_plusMatch13.013001

zohocorpmanageengine_servicedesk_plusMatch13.013002

zohocorpmanageengine_servicedesk_plusMatch13.013003

zohocorpmanageengine_servicedesk_plusMatch13.013004

zohocorpmanageengine_servicedesk_plusMatch13.013005

zohocorpmanageengine_servicedesk_plusMatch13.013006

zohocorpmanageengine_servicedesk_plusMatch13.013007

zohocorpmanageengine_servicedesk_plusMatch13.013008

zohocorpmanageengine_servicedesk_plusMatch13.013009

zohocorpmanageengine_servicedesk_plusMatch13.013010

Node

zohocorpmanageengine_servicedesk_plus_mspRange<10.6

zohocorpmanageengine_servicedesk_plus_mspMatch10.6-

zohocorpmanageengine_servicedesk_plus_mspMatch10.610600

zohocorpmanageengine_servicedesk_plus_mspMatch10.610601

zohocorpmanageengine_servicedesk_plus_mspMatch10.610602

zohocorpmanageengine_servicedesk_plus_mspMatch10.610603

zohocorpmanageengine_servicedesk_plus_mspMatch10.610604

zohocorpmanageengine_servicedesk_plus_mspMatch10.610605

zohocorpmanageengine_servicedesk_plus_mspMatch10.610606

zohocorpmanageengine_servicedesk_plus_mspMatch10.610607

zohocorpmanageengine_servicedesk_plus_mspMatch10.610608

zohocorpmanageengine_servicedesk_plus_mspMatch10.610609

zohocorpmanageengine_servicedesk_plus_mspMatch10.610610

Node

zohocorpmanageengine_supportcenter_plusRange<11.0

zohocorpmanageengine_supportcenter_plusMatch11.011000

zohocorpmanageengine_supportcenter_plusMatch11.011001

zohocorpmanageengine_supportcenter_plusMatch11.011002

zohocorpmanageengine_supportcenter_plusMatch11.011003

zohocorpmanageengine_supportcenter_plusMatch11.011004

zohocorpmanageengine_supportcenter_plusMatch11.011005

zohocorpmanageengine_supportcenter_plusMatch11.011006

zohocorpmanageengine_supportcenter_plusMatch11.011007

zohocorpmanageengine_supportcenter_plusMatch11.011008

zohocorpmanageengine_supportcenter_plusMatch11.011009

zohocorpmanageengine_supportcenter_plusMatch11.011010

zohocorpmanageengine_supportcenter_plusMatch11.011011

zohocorpmanageengine_supportcenter_plusMatch11.011012

zohocorpmanageengine_supportcenter_plusMatch11.011013

zohocorpmanageengine_supportcenter_plusMatch11.011014

zohocorpmanageengine_supportcenter_plusMatch11.011015

zohocorpmanageengine_supportcenter_plusMatch11.011016

zohocorpmanageengine_supportcenter_plusMatch11.011017

zohocorpmanageengine_supportcenter_plusMatch11.011018

zohocorpmanageengine_supportcenter_plusMatch11.011019

zohocorpmanageengine_supportcenter_plusMatch11.011020

zohocorpmanageengine_supportcenter_plusMatch11.011021

zohocorpmanageengine_supportcenter_plusMatch11.011022

zohocorpmanageengine_supportcenter_plusMatch11.011024

zohocorpmanageengine_supportcenter_plusMatch11.011025

VendorProductVersionCPE
zohocorpmanageengine_servicedesk_plus*cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:*:*:*:*:*:*:*:*
zohocorpmanageengine_servicedesk_plus13.0cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:13.0:13000:*:*:*:*:*:*
zohocorpmanageengine_servicedesk_plus13.0cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:13.0:13001:*:*:*:*:*:*
zohocorpmanageengine_servicedesk_plus13.0cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:13.0:13002:*:*:*:*:*:*
zohocorpmanageengine_servicedesk_plus13.0cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:13.0:13003:*:*:*:*:*:*
zohocorpmanageengine_servicedesk_plus13.0cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:13.0:13004:*:*:*:*:*:*
zohocorpmanageengine_servicedesk_plus13.0cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:13.0:13005:*:*:*:*:*:*
zohocorpmanageengine_servicedesk_plus13.0cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:13.0:13006:*:*:*:*:*:*
zohocorpmanageengine_servicedesk_plus13.0cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:13.0:13007:*:*:*:*:*:*
zohocorpmanageengine_servicedesk_plus13.0cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:13.0:13008:*:*:*:*:*:*

Vendor	Product	Version	CPE
zohocorp	manageengine_servicedesk_plus	*	cpe:2.3:a:zohocorp:manageengine_servicedesk_plus::::::::
zohocorp	manageengine_servicedesk_plus	13.0	cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:13.0:13000::::::
zohocorp	manageengine_servicedesk_plus	13.0	cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:13.0:13001::::::
zohocorp	manageengine_servicedesk_plus	13.0	cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:13.0:13002::::::
zohocorp	manageengine_servicedesk_plus	13.0	cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:13.0:13003::::::
zohocorp	manageengine_servicedesk_plus	13.0	cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:13.0:13004::::::
zohocorp	manageengine_servicedesk_plus	13.0	cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:13.0:13005::::::
zohocorp	manageengine_servicedesk_plus	13.0	cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:13.0:13006::::::
zohocorp	manageengine_servicedesk_plus	13.0	cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:13.0:13007::::::
zohocorp	manageengine_servicedesk_plus	13.0	cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:13.0:13008::::::