CVE-2022-35405

Vulnerability ID

CVE-2022-35405

Severity

CRITICAL

Severity Score

9.8

Summary

Zoho ManageEngine Password Manager Pro before 12101 and PAM360 before 5510 are vulnerable to unauthenticated remote code execution. (This also affects ManageEngine Access Manager Plus before 4303 with authentication.)

References

https://www.manageengine.com/products/passwordmanagerpro/advisory/cve-2022-35405.html

http://packetstormsecurity.com/files/167918/Zoho-Password-Manager-Pro-XML-RPC-Java-Deserialization.html

Mitigation and Patches

https://www.manageengine.com/products/passwordmanagerpro/advisory/cve-2022-35405.html

Exploits

https://github.com/viniciuspereiras/CVE-2022-35405

https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/zoho_password_manager_pro_xml_rpc_rce.rb

https://github.com/viniciuspereiras/CVE-2022-35405

https://www.cisa.gov/known-exploited-vulnerabilities-catalog

http://packetstormsecurity.com/files/167918/Zoho-Password-Manager-Pro-XML-RPC-Java-Deserialization.html

Metasploit Payload

https://xz.aliyun.com/t/11578

https://www.manageengine.com/products/passwordmanagerpro/advisory/cve-2022-35405.html

https://archives2.manageengine.com/passwordmanagerpro/12101/ManageEngine_PasswordManager_Pro_12100_to_12101.ppm

https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/zoho_password_manager_pro_xml_rpc_rce.rb

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE ID

CWE-502

CVE-2022-35405

Recent Publish

See SecOps Solution
in action

Products

Compare

Company

Resources

Try It

CVE-2022-35405

Recent Publish

See SecOps Solutionin action

Products

Compare

Company

Resources

Try It

See SecOps Solution
in action