CVE-2024-24409: high-severity vulnerability in ManageEngine ADManager Plus
Privilege Escalation
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
41Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendcvss 8.8epss 6.2%
from disclosure to weaponsame day
Published on NVDNov 8
1st PoCSep 28
Zohocorp ManageEngine ADManager Plus versions 7203 and prior are vulnerable to Privilege Escalation in the Modify Computers option.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
ManageEngine · ADManager Pluspublic PoCs found — 2
exploitdbwww.exploit-db.com/exploits/52148unverifiedgithubgithub.com/passtheticket/CVE-2024-24409★ 1⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — ManageEngine ADManager Plus
In the same product, most dangerous first.