CVE-2022-37024: High severity manageengine firewall analyzer vulnerability

Published Aug 9, 2022
·
Updated

Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, and OpUtils before 2022-07-29 through 2022-07-30 ( 125658, 126003, 126105, and 126120) allow authenticated users to make database changes that lead to remote code execution.

Affected Software

108 affected components
Zohocorp Manageengine Firewall Analyzer=12.5-build125450
Zohocorp Manageengine Firewall Analyzer=12.5-build125451
Zohocorp Manageengine Firewall Analyzer=12.5-build125452
Zohocorp Manageengine Firewall Analyzer=12.5-build125453
Zohocorp Manageengine Firewall Analyzer=12.5-build125455
Zohocorp Manageengine Firewall Analyzer=12.5-build125456
Zohocorp Manageengine Firewall Analyzer=12.5-build125664
Zohocorp Manageengine Firewall Analyzer=12.6-build126000
Zohocorp Manageengine Firewall Analyzer=12.6-build126001
Zohocorp Manageengine Firewall Analyzer=12.6-build126100
Zohocorp Manageengine Firewall Analyzer=12.6-build126101
Zohocorp Manageengine Firewall Analyzer=12.6-build126102
Zohocorp Manageengine Firewall Analyzer=12.6-build126103
Zohocorp Manageengine Firewall Analyzer=12.6-build126113
Zohocorp Manageengine Firewall Analyzer=12.6-build126114
Zohocorp Manageengine Firewall Analyzer=12.6-build126115
Zohocorp Manageengine Firewall Analyzer=12.6-build126116
Zohocorp Manageengine Firewall Analyzer=12.6-build126117
ZohoCorp Manageengine Netflow Analyzer=12.5-build125450
ZohoCorp Manageengine Netflow Analyzer=12.5-build125451
ZohoCorp Manageengine Netflow Analyzer=12.5-build125452
ZohoCorp Manageengine Netflow Analyzer=12.5-build125453
ZohoCorp Manageengine Netflow Analyzer=12.5-build125455
ZohoCorp Manageengine Netflow Analyzer=12.5-build125456
ZohoCorp Manageengine Netflow Analyzer=12.5-build125664
ZohoCorp Manageengine Netflow Analyzer=12.6-build126000
ZohoCorp Manageengine Netflow Analyzer=12.6-build126001
ZohoCorp Manageengine Netflow Analyzer=12.6-build126100
ZohoCorp Manageengine Netflow Analyzer=12.6-build126101
ZohoCorp Manageengine Netflow Analyzer=12.6-build126102
ZohoCorp Manageengine Netflow Analyzer=12.6-build126103
ZohoCorp Manageengine Netflow Analyzer=12.6-build126113
ZohoCorp Manageengine Netflow Analyzer=12.6-build126114
ZohoCorp Manageengine Netflow Analyzer=12.6-build126115
ZohoCorp Manageengine Netflow Analyzer=12.6-build126116
ZohoCorp Manageengine Netflow Analyzer=12.6-build126117
Zohocorp Manageengine Network Configuration Manager=12.5-build125450
Zohocorp Manageengine Network Configuration Manager=12.5-build125451
Zohocorp Manageengine Network Configuration Manager=12.5-build125452
Zohocorp Manageengine Network Configuration Manager=12.5-build125453
Zohocorp Manageengine Network Configuration Manager=12.5-build125455
Zohocorp Manageengine Network Configuration Manager=12.5-build125456
Zohocorp Manageengine Network Configuration Manager=12.5-build125664
Zohocorp Manageengine Network Configuration Manager=12.6-build126000
Zohocorp Manageengine Network Configuration Manager=12.6-build126001
Zohocorp Manageengine Network Configuration Manager=12.6-build126100
Zohocorp Manageengine Network Configuration Manager=12.6-build126101
Zohocorp Manageengine Network Configuration Manager=12.6-build126102
Zohocorp Manageengine Network Configuration Manager=12.6-build126103
Zohocorp Manageengine Network Configuration Manager=12.6-build126113
Zohocorp Manageengine Network Configuration Manager=12.6-build126114
Zohocorp Manageengine Network Configuration Manager=12.6-build126115
Zohocorp Manageengine Network Configuration Manager=12.6-build126116
Zohocorp Manageengine Network Configuration Manager=12.6-build126117
Zohocorp ManageEngine OpManager=12.5-build125450
Zohocorp ManageEngine OpManager=12.5-build125451
Zohocorp ManageEngine OpManager=12.5-build125452
Zohocorp ManageEngine OpManager=12.5-build125453
Zohocorp ManageEngine OpManager=12.5-build125455
Zohocorp ManageEngine OpManager=12.5-build125456
Zohocorp ManageEngine OpManager=12.5-build125664
Zohocorp ManageEngine OpManager=12.6-build126000
Zohocorp ManageEngine OpManager=12.6-build126001
Zohocorp ManageEngine OpManager=12.6-build126100
Zohocorp ManageEngine OpManager=12.6-build126101
Zohocorp ManageEngine OpManager=12.6-build126102
Zohocorp ManageEngine OpManager=12.6-build126103
Zohocorp ManageEngine OpManager=12.6-build126113
Zohocorp ManageEngine OpManager=12.6-build126114
Zohocorp ManageEngine OpManager=12.6-build126115
Zohocorp ManageEngine OpManager=12.6-build126116
Zohocorp ManageEngine OpManager=12.6-build126117
Zohocorp Manageengine Opmanager Msp=12.5-build125450
Zohocorp Manageengine Opmanager Msp=12.5-build125656
Zohocorp Manageengine Opmanager Msp=12.5-build125664
Zohocorp Manageengine Opmanager Msp=12.6-build126000
Zohocorp Manageengine Opmanager Msp=12.6-build126001
Zohocorp Manageengine Opmanager Msp=12.6-build126100
Zohocorp Manageengine Opmanager Msp=12.6-build126103
Zohocorp Manageengine Opmanager Msp=12.6-build126113
Zohocorp Manageengine Opmanager Msp=12.6-build126117
ZohoCorp Manageengine Opmanager Plus=12.5-build125450
ZohoCorp Manageengine Opmanager Plus=12.5-build125656
ZohoCorp Manageengine Opmanager Plus=12.5-build125664
ZohoCorp Manageengine Opmanager Plus=12.6-build126000
ZohoCorp Manageengine Opmanager Plus=12.6-build126001
ZohoCorp Manageengine Opmanager Plus=12.6-build126100
ZohoCorp Manageengine Opmanager Plus=12.6-build126103
ZohoCorp Manageengine Opmanager Plus=12.6-build126113
ZohoCorp Manageengine Opmanager Plus=12.6-build126117
Zohocorp Manageengine Oputils=12.5-build125450
Zohocorp Manageengine Oputils=12.5-build125451
Zohocorp Manageengine Oputils=12.5-build125452
Zohocorp Manageengine Oputils=12.5-build125453
Zohocorp Manageengine Oputils=12.5-build125455
Zohocorp Manageengine Oputils=12.5-build125456
Zohocorp Manageengine Oputils=12.5-build125664
Zohocorp Manageengine Oputils=12.6-build126000
Zohocorp Manageengine Oputils=12.6-build126001
Zohocorp Manageengine Oputils=12.6-build126100
Zohocorp Manageengine Oputils=12.6-build126101
Zohocorp Manageengine Oputils=12.6-build126102
Zohocorp Manageengine Oputils=12.6-build126103
Zohocorp Manageengine Oputils=12.6-build126113
Zohocorp Manageengine Oputils=12.6-build126114
Zohocorp Manageengine Oputils=12.6-build126115
Zohocorp Manageengine Oputils=12.6-build126116
Zohocorp Manageengine Oputils=12.6-build126117

Event History

Aug 9, 2022
CVE Published
via MITRE·03:15 PM
Data Sourced
via MITRE·03:15 PM
Description
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2022-37024?

CVE-2022-37024 has been classified as a critical vulnerability due to its potential for remote code execution.

2

How do I fix CVE-2022-37024?

To mitigate CVE-2022-37024, update all affected ManageEngine software to the versions released on or after July 29, 2022.

3

Which versions are affected by CVE-2022-37024?

CVE-2022-37024 affects Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, and OpUtils versions prior to the update on July 29, 2022.

4

What type of attacks can CVE-2022-37024 enable?

CVE-2022-37024 allows authenticated users to make database changes that can lead to remote code execution within the affected ManageEngine applications.

5

Who is primarily affected by CVE-2022-37024?

Organizations using vulnerable versions of Zoho ManageEngine products are primarily at risk due to the potential for exploitation by authenticated users.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203