A critical command injection vulnerability in Zohocorp ManageEngine products permits authenticated remote code execution, posing a significant risk of system compromise.

This is a command injection vulnerability (CWE-77) triggered by a flaw in a third-party dependency. While the CVSS score is 8.4, the vulnerability requires low privileges (authenticated) to execute arbitrary commands on agent machines.

Successful exploitation allows an attacker to execute arbitrary code on agent machines, potentially leading to full system compromise, lateral movement within the network, and the theft of sensitive data. Given the CVSS score of 8.4, this vulnerability represents a high risk to organizational security and operational integrity.

Immediate Action: Update ADSelfService Plus to 6525 or later, DataSecurity Plus to 6264 or later, and RecoveryManager Plus to 6313 or later as specified by the vendor advisory.

Proactive Monitoring: Monitor agent machine logs for unexpected process execution or abnormal command-line activity indicative of injection attempts.

Compensating Controls: Restrict network access to management agents to trusted administrative segments to limit the potential pool of authenticated attackers.

Public Exploit Available: No (exploit_available: false)

The severity of this vulnerability necessitates immediate action. Administrators should prioritize patching all affected ManageEngine instances to prevent potential unauthorized code execution and secure their environment against exploitation.