Vulnerability in Zohocorp Manageengine_device_control_plus
CVE-2022-47577
An issue was discovered in the endpoint protection agent in Zoho ManageEngine Device Control Plus 10.1.2228.15. Despite configuring complete restrictions on USB pendrives, USB HDD devices, memory cards, USB connections to mobile devices, e…
EPSS: 0.011 (62.7th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.1 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N.
Affected products
- Zohocorp Manageengine_device_control_plus — versions 10.1.2228.15
- N/a — versions n/a
Public proof-of-concept exploits
References
- cve@mitre.org (Exploit, Third Party Advisory)
- cve@mitre.org (Vendor Advisory)
Frequently asked questions
- What is CVE-2022-47577?
- CVE-2022-47577 is a high-severity vulnerability in Zohocorp Manageengine_device_control_plus. CVSS score: 7.1/10. Published 2022-12-20.
- How severe is CVE-2022-47577?
- High severity. CVSS v3 base score is 7.1 out of 10.
- Is CVE-2022-47577 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.