Skip to content
NewA calmer, faster ZeroHour
Exploit / PoCcritical

Experts shared PoC exploit code for RCE in Zoho ManageEngine ADAudit Plus tool

Security Affairsby @securityaffairs ()3 min read3
Read at securityaffairs.com
Analyze CVE-2022-28219 with Vani AIImpact, affected versions, exploitation, mitigations and detection
CVEs
CVE-2022-28219CVE-2020-10189
Tags
cve-2022-28219cve-2020-10189exploit

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2020-10189
Unauthenticated RCE in Zoho ManageEngine Desktop Central
9.8100%KEVPoC ×3
KEV
CVE-2022-28219
Cewolf in Zoho ManageEngine ADAudit Plus before 7060 is vulnerable to an unauthenticated XXE attack that leads to Remote Code Execution
9.897%PoC ×2

From the original article

3 min read at securityaffairs.com

Researchers shared technical details and proof-of-concept exploit code for the CVE-2022-28219 flaw in Zoho ManageEngine ADAudit Plus tool. Security researchers from Horizon3. ai have published technical details and proof-of-concept exploit code for a critical vulnerability, tracked as CVE-2022-28219 (CVSS 9.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.