Remote code execution

2022-08-1020:16:00

PRIOn knowledge base

www.prio-n.com

8.9 High

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

78.7%

JSON

Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, and OpUtils before 2022-07-29 through 2022-07-30 ( 125658, 126003, 126105, and 126120) allow authenticated users to make database changes that lead to remote code execution.

CPENameOperatorVersion
manageengine_firewall_analyzereq12.5 build125664
manageengine_firewall_analyzereq12.6 build126113
manageengine_firewall_analyzereq12.6 build126114
manageengine_firewall_analyzereq12.6 build126115
manageengine_firewall_analyzereq12.6 build126116
manageengine_firewall_analyzereq12.6 build126117
manageengine_firewall_analyzereq12.6 build126100
manageengine_firewall_analyzereq12.6 build126101
manageengine_firewall_analyzereq12.6 build126102
manageengine_firewall_analyzereq12.6 build126103

Name	Operator	Version
manageengine_firewall_analyzer	eq	12.5 build125664
manageengine_firewall_analyzer	eq	12.6 build126113
manageengine_firewall_analyzer	eq	12.6 build126114
manageengine_firewall_analyzer	eq	12.6 build126115
manageengine_firewall_analyzer	eq	12.6 build126116
manageengine_firewall_analyzer	eq	12.6 build126117
manageengine_firewall_analyzer	eq	12.6 build126100
manageengine_firewall_analyzer	eq	12.6 build126101
manageengine_firewall_analyzer	eq	12.6 build126102
manageengine_firewall_analyzer	eq	12.6 build126103