CVE-2023-26601

CWE-400 — Uncontrolled Resource Consumption3 documents3 sources

Severity

7.5HIGH

EPSS

16.4%

top 5.14%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Zohocorp Manageengine Assetexplorer Zohocorp Manageengine Servicedesk Plus Zohocorp Manageengine Servicedesk Plus MSP +1 more

Timeline

PublishedMar 6

Latest updateMar 7

Description

Zoho ManageEngine ServiceDesk Plus through 14104, Asset Explorer through 6987, ServiceDesk Plus MSP before 14000, and Support Center Plus before 14000 allow Denial-of-Service (DoS).

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages4 packages

▶NVDzohocorp/manageengine_servicedesk_plus< 14.1+1

▶NVDzohocorp/manageengine_servicedesk_plus_msp< 14.0+1

▶NVDzohocorp/manageengine_supportcenter_plus< 14.0+1

▶NVDzohocorp/manageengine_assetexplorer< 6.9+1

🔴Vulnerability Details

GHSA

GHSA-ww5h-4h29-gwjp: Zoho ManageEngine ServiceDesk Plus through 14104, Asset Explorer through 6987, ServiceDesk Plus MSP before 14000, and Support Center Plus before 14000↗2023-03-07

▶

CVEList

CVE-2023-26601: Zoho ManageEngine ServiceDesk Plus through 14104, Asset Explorer through 6987, ServiceDesk Plus MSP before 14000, and Support Center Plus before 14000↗2023-03-06

▶