High severity · published Aug 29, 2022
CVE-2022-38772
Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, and OpUtils before 125658, 126003, 126105, and 126120 allow…
8.8
CVSS
78%
EPSS
No
On KEV
Description
Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, and OpUtils before 125658, 126003, 126105, and 126120 allow authenticated users to make database changes that lead to remote code execution in the NMAP feature.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)78.0% · higher than 100% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MN
Manageengine Netflow Analyzer · Zohocorp
12.5; 12.5; 12.5; 12.5; 12.5; 12.5; +34 more · source: NVD
MN
Manageengine Network Configuration Manager · Zohocorp
12.5; 12.5; 12.5; 12.5; 12.5; 12.5; +34 more · source: NVD
MO
Manageengine Opmanager · Zohocorp
12.5; 12.5; 12.5; 12.5; 12.5; 12.5; +34 more · source: NVD
MO
Manageengine Opmanager Msp · Zohocorp
12.5; 12.5; 12.5; 12.5; 12.6; 12.6; +7 more · source: NVD
MO
Manageengine Opmanager Plus · Zohocorp
12.5; 12.5; 12.5; 12.5; 12.6; 12.6; +7 more · source: NVD
MO
Manageengine Oputils · Zohocorp
12.5; 12.5; 12.5; 12.5; 12.5; 12.5; +16 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-38772
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-38772
Vendor Advisory
https://manageengine.com
Vendor Advisory
https://www.manageengine.com/itom/advisory/cve-2022-38772.html
More from Manageengine Netflow Analyzer
9.8
CVE-2019-12196
A SQL injection vulnerability in /client/api/json/v2/nfareports/compareReport in Zoho ManageEngine NetFlow Analyzer 12.3 allows attackers to execute arbitrary SQL commands via the…
8.8
CVE-2022-37024
Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, and OpUtils before 2022-07-29 through 2022-07-30 ( 125658, 126003,…
8.6
CVE-2023-47211
A directory traversal vulnerability exists in the uploadMib functionality of ManageEngine OpManager 12.7.258
8.2
CVE-2022-35404
ManageEngine Password Manager Pro 12100 and prior and OPManager 126100 and prior are vulnerable to unauthorized file and directory creation on a server machine
7.8
CVE-2019-12133
Multiple Zoho ManageEngine products suffer from local privilege escalation due to improper permissions for the %SYSTEMDRIVE%\ManageEngine directory and its sub-folders