Authorization Bypass and PowerShell Command Injection in Zohocorp ManageEngine DDI Central

Executive Summary

This vulnerability is an authorization bypass and PowerShell command injection flaw in Zohocorp ManageEngine DDI Central versions below 6301. It allows authenticated non-administrative users to bypass authorization checks and inject malicious PowerShell commands by manipulating DNS suffix values. This could let attackers target unauthorized Windows DHCP subnets and execute arbitrary commands on managed Windows DHCP servers.

Useful 0 Not Useful 0

Impact Analysis

If you use an affected version of Zohocorp ManageEngine DDI Central, an attacker with valid but non-administrative credentials could exploit this to gain unauthorized access to sensitive systems, execute arbitrary commands, or disrupt DHCP services. This may lead to data breaches, system compromise, or service disruption.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could lead to unauthorized access or data exfiltration, violating GDPR's data protection requirements or HIPAA's security rules. Organizations may face fines, legal penalties, or reputational damage if exploited due to non-compliance with these regulations.

Useful 0 Not Useful 0

Mitigation Strategies

Update Zohocorp ManageEngine DDI Central to version 6301 or later to address the authorization bypass and command injection vulnerabilities.

Useful 0 Not Useful 0