What is CVE-2022-47578?

CVE-2022-47578 is a high-severity vulnerability in Zohocorp Manageengine_device_control_plus, classified under Authentication Bypass Using an Alternate Path or Channel. CVSS score: 7.1/10. Published 2022-12-20.

How severe is CVE-2022-47578?

High severity. CVSS v3 base score is 7.1 out of 10.

Vulnerability in Zohocorp Manageengine_device_control_plus

CVE-2022-47578

An issue was discovered in the endpoint protection agent in Zoho ManageEngine Device Control Plus 10.1.2228.15. Despite configuring complete restrictions on USB pendrives, USB HDD devices, memory cards, USB connections to mobile devices, e…

EPSS: 0.010 (57.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.1 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N.

Affected products

Zohocorp Manageengine_device_control_plus — versions 10.1.2228.15
N/a — versions n/a

Weakness classification (CWE)

CWE-288 — Authentication Bypass Using an Alternate Path or Channel

References

cve@mitre.org (Exploit, Third Party Advisory)
cve@mitre.org (Vendor Advisory)

Frequently asked questions

What is CVE-2022-47578?: CVE-2022-47578 is a high-severity vulnerability in Zohocorp Manageengine_device_control_plus, classified under Authentication Bypass Using an Alternate Path or Channel. CVSS score: 7.1/10. Published 2022-12-20.
How severe is CVE-2022-47578?: High severity. CVSS v3 base score is 7.1 out of 10.