Intrusion PreventionManageEngine.Exchange.Reporter.Plus.ADSHACluster.Code.Execution
Description
This indicates an attack attempt to exploit an Remote Code Execution Vulnerability in Zoho Corporation ManageEngine Exchange Reporter Plus.
The vulnerability is due to an error in the vulnerable application when handling a maliciously crafted HTTP request. A remote attacker may be able to exploit this to execute arbitrary code within the context of the target application, via a crafted HTTP request.
Affected Products
Zoho Corporation ManageEngine Exchange Reporter Plus version 5310 and prior
Impact
System Compromise: Remote attackers can gain control of vulnerable systems.
Recommended Actions
Currently, we are unaware of any vendor supplied patch for this issue.
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| Date | Version | Status | Detail |
|---|---|---|---|
| 2023-08-03 | 25.614 |
Modified
|
Name:ZOHO. ManageEngine. Exchange. Reporter. Plus. Code. Execution:ManageEngine. Exchange. Reporter. Plus. ADSHACluster. Code. Execution |
| 2019-02-01 | 14.540 |
Modified
|
Name:Zoho. ManageEngine. Exchange. Reporter. Plus. Code. Execution:ZOHO. ManageEngine. Exchange. Reporter. Plus. Code. Execution |
| 2018-11-20 | 13.494 |
Modified
|
Default_action:pass:drop |
| ID | 46467 |
| Created | Sep 06, 2018 |
| Updated | Aug 02, 2023 |
| Risk |
|
| Default Action | drop |
| Active | |
| Affected OS | Windows |
| Affected App | Other |
| Profile Type | Code Injection |