CVE-2019-17421

moderate-risk

Published 2019-11-21

Incorrect file permissions on the packaged Nipper executable file in Zoho ManageEngine OpManager 12.4.072 and Firewall Analyzer 12.4.072 allow local users to elevate privileges to root by overwriting this file with a malicious payload.

Do I need to act?

0.08% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 7.8/10 High

LOCAL / LOW complexity

Affected Products (2)

Manageengine Firewall Analyzer

Manageengine Opmanager

Affected Vendors

Zohocorp

References (6)

Third Party Advisory https://blog.vastart.dev/2019/11/cve-2019-17421-privilege-escalation.html

Exploit https://twitter.com/va_start

Patch https://www.manageengine.com/products/firewall/security-updates/cve-2019-17421.h...

Third Party Advisory https://blog.vastart.dev/2019/11/cve-2019-17421-privilege-escalation.html

Exploit https://twitter.com/va_start

Patch https://www.manageengine.com/products/firewall/security-updates/cve-2019-17421.h...

/ 100

moderate-risk

Severity 24/34 · High

Exploitability 0/34 · Minimal

Exposure 7/34 · Low