Intrusion PreventionManageEngine.Desktop.Central.Password.Privilege.Escalation
Description
This indicates an attack attempt to exploit an Elevation of Privilege Vulnerability in Zoho ManageEngine Desktop Central.
The vulnerability is due to an error in the vulnerable application when handling a maliciously crafted request. A remote attacker may be able to exploit this to leverage their privileges on vulnerable systems.
Affected Products
Zoho ManageEngine Desktop Central before 10.1.2137.10
Impact
Privilege Escalation: Remote attackers can leverage their privileges on vulnerable systems.
Recommended Actions
Apply the most recent upgrade or patch from the vendor.
https://www.zoho.com/desktop-central-cloud/
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| Date | Version | Detail |
|---|---|---|
| 2023-08-07 | 25.615 | Name:Zoho. ManageEngine. Desktop. Central. Privilege. Escalation:ManageEngine. Desktop. Central. Password. Privilege. Escalation |
| 2022-07-26 | 21.363 | Default_action:pass:drop |
| 2022-07-13 | 21.355 |
| ID | 51651 |
| Created | Jun 06, 2022 |
| Updated | Aug 04, 2023 |
| Risk |
|
| CVE ID | CVE-2022-23863 |
| Exploit Prediction Score | 0.76% |
| Default Action | drop |
| Active | |
| Affected OS | Windows, Linux, MacOS |
| Affected App | Other |