CISA warnt vor Hackern, die die jüngste Sicherheitslücke in Zoho ManageEngine ausnutzen

Teilen:

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a recently disclosed security flaw in Zoho ManageEngine to its Known Exploited Vulnerabilities (KEV) Catalog, citing evidence of active exploitation.

“Zoho ManageEngine PAM360, Password Manager Pro, and Access Manager Plus contain an unspecified vulnerability which allows for remote code execution,” the agency said in a notice.

 

Die critical vulnerability, tracked as CVE-2022-35405, is rated 9.8 out of 10 for severity on the CVSS scoring system, and was patched by Zoho as part of updates released on June 24, 2022.

Although the exact nature of the flaw remains unknown, the India-based enterprise solutions company sagte it addressed the issue by removing the vulnerable components that could lead to the remote execution of arbitrary code.

Zoho has also warned of the public availability of a proof-of-concept (PoC) exploit for the vulnerability, making it imperative that customers move quickly to upgrade the instances of Password Manager Pro, PAM360 and Access Manager Plus as soon as possible.

The cybersecurity agency did not share additional specifics on how the flaw is being weaponized and how widespread the exploitation efforts are, but data gathered by GreyNoise shows that in-the-wild attacks were detected on September 7, 2022.

In light of active exploitation of the vulnerability, Federal Civilian Executive Branch (FCEB) agencies are required to apply the vendor-provided patches by October 13, 2022.

https://thehackernews.com/2022/09/cisa-warns-of-hackers-exploiting-recent.html

Kommentar verfassen

Deine E-Mail-Adresse wird nicht veröffentlicht. Erforderliche Felder sind mit * markiert

lade-bild
London, GB
5:59 pm, Feb. 6, 2025
Wetter-Symbol 6°C
L: 5° | H: 7°
broken clouds
Luftfeuchtigkeit: 77 %
Druck: 1040 mb
Wind: 11 mph ENE
Windböe: 0 mph
UV-Index: 0
Niederschlag: 0 mm
Wolken: 75%
Regen Chance: 0%
Sichtbarkeit: 10 km
Sonnenaufgang: 7:30 am
Sonnenuntergang: 4:58 pm
TäglichStündlich
Tägliche VorhersageStündliche Vorhersage
Today 9:00 pm
Wetter-Symbol
5° | 7°°C 0 mm 0% 12 mph 79 % 1040 mb 0 mm/h
Tomorrow 9:00 pm
Wetter-Symbol
3° | 5°°C 1 mm 100% 13 mph 96 % 1037 mb 0 mm/h
Sa. Feb. 08 9:00 pm
Wetter-Symbol
4° | 6°°C 1 mm 100% 12 mph 95 % 1027 mb 0 mm/h
So. Feb. 09 9:00 pm
Wetter-Symbol
5° | 8°°C 0 mm 0% 11 mph 95 % 1037 mb 0 mm/h
Mo. Feb. 10 9:00 pm
Wetter-Symbol
3° | 5°°C 0.2 mm 20% 11 mph 94 % 1036 mb 0 mm/h
Today 6:00 pm
Wetter-Symbol
6° | 6°°C 0 mm 0% 11 mph 77 % 1040 mb 0 mm/h
Today 9:00 pm
Wetter-Symbol
4° | 6°°C 0 mm 0% 12 mph 79 % 1039 mb 0 mm/h
Tomorrow 12:00 am
Wetter-Symbol
4° | 5°°C 0 mm 0% 12 mph 79 % 1037 mb 0 mm/h
Tomorrow 3:00 am
Wetter-Symbol
3° | 3°°C 0 mm 0% 11 mph 82 % 1033 mb 0 mm/h
Tomorrow 6:00 am
Wetter-Symbol
4° | 4°°C 0 mm 0% 12 mph 77 % 1030 mb 0 mm/h
Tomorrow 9:00 am
Wetter-Symbol
4° | 4°°C 0 mm 0% 13 mph 74 % 1028 mb 0 mm/h
Tomorrow 12:00 pm
Wetter-Symbol
3° | 3°°C 0.89 mm 89% 12 mph 91 % 1025 mb 0 mm/h
Tomorrow 3:00 pm
Wetter-Symbol
4° | 4°°C 1 mm 100% 13 mph 91 % 1022 mb 0 mm/h
Name Preis24H (%)
Bitcoin(BTC)
€93,633.53
-0.84%
Ethereum(ETH)
€2,611.67
-1.79%
Fesseln(USDT)
€0.97
0.00%
XRP(XRP)
€2.26
-3.24%
Solana(SOL)
€184.75
-3.40%
USDC(USDC)
€0.97
0.00%
Dogecoin(DOGE)
€0.241182
-2.88%
Shiba Inu(SHIB)
€0.000014
-4.71%
Pepe(PEPE)
€0.000009
-5.13%
Nach oben scrollen