HTTP: Zoho ManageEngine OpManager CVE-2023-31099 Insecure Deserialization
This signature detects attempts to exploit a known vulnerability against Zoho ManageEngine. A successful attack can lead to arbitrary code execution.
Extended Description
Zoho ManageEngine OPManager through 126323 allows an authenticated user to achieve remote code execution via probe servers.
Affected Products
Zohocorp manageengine_opmanager
References
CVE: CVE-2023-31099
Short Name
HTTP:CTS:ZOHO-CVE-2023-31099
Severity
Major
Recommended
True
Recommended Action
Drop
Category
HTTP
Keywords
CVE-2023-31099 Deserialization Insecure ManageEngine OpManager Zoho
Release Date
09/15/2023
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3634
False Positive
Unknown
Vendors
Zohocorp