CVE-2023-38743
CVSS 3.1 Score 7.2 of 10 (high)
Details
Summary
CVE-2023-38743 is a newly disclosed vulnerability affecting Zoho ManageEngine ADManager Plus before Build 7200. This issue grants admin users the ability to execute commands on the host machine, thereby compromising the security of the affected system. An attacker who exploits this vulnerability can potentially gain unauthorized control over the targeted machine, leading to serious data breaches or system disruptions. System administrators are strongly urged to update their ADManager Plus installation to the latest version to mitigate this risk. Failure to do so may leave the system open to remote command injection attacks.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Zohocorp Manageengine Admanager Plus
- ManageEngine ADManager Plus
Affected Vendors
- Manage Engine
- Zoho Corporation