CVE-2022-37024
Zohocorp Manageengine Firewall Analyzer 12.5 … 12.6
Raw vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HSummary
CVE-2022-37024 is a high-severity an unspecified weakness vulnerability in Zohocorp Manageengine Firewall Analyzer. Its CVSS base score is 8.8 (High).
Operationally, ranked in the top 0.5% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
The strongest mitigations our analysis identified map to AC-3 (Access Enforcement) and AC-6 (Least Privilege) — see the control section below for these in your framework.
Deeper analysis AI-assisted summary
Synthesised by an AI model from the NVD description and linked references — a reading aid, not an authoritative source.
Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, and OpUtils before the builds released 2022-07-29 through 2022-07-30 are affected by a vulnerability that permits authenticated users to perform database changes resulting in remote code execution. The flaw carries a CVSS 3.1 base score of 8.8.
An attacker who already possesses valid credentials on an affected installation can exploit the issue to modify database contents and ultimately achieve remote code execution on the server.
The vendor advisory at https://www.manageengine.com/itom/advisory/cve-2022-37024.html addresses the affected builds and outlines available patches. The associated EPSS score has remained at a peak and current value of 0.5123 with no material rise observed after disclosure.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2022-39678
Vulnerability Data
Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, and OpUtils before 2022-07-29 through 2022-07-30 ( 125658, 126003, 126105, and 126120) allow authenticated users to make database changes that lead to remote code execution.
- CWE(s)
Related Threats
Likely ATT&CK TechniquesAI
Techniques this vulnerability likely enables, inferred from its description, weakness type, and attributed-actor tradecraft. Confidence is per-technique.
CVEs Like This One
Affected Assets
Mitigating Controls
Control response
Mitigating Controls (NIST 800-53 r5) AI
Directly enforces authorization checks on database operations so authenticated users cannot perform the unauthorized modifications that lead to RCE.
Limits privileges of authenticated accounts to only those required, preventing the excessive database modification rights exploited by the CVE.
Restricts logical access to make changes (including database content) to only authorized roles, blocking the exact vector used for RCE.