Experts Sound Alarm Over Growing Attacks Exploiting Zoho ManageEngine Products

Multiple threat actors have been observed opportunistically weaponizing a now-patched critical security vulnerability impacting several Zoho ManageEngine products since January 20, 2023.
Tracked as CVE-2022-47966 (CVSS score: 9.8), the remote code execution flaw allows a complete takeover of the susceptible systems by unauthenticated attackers.
As many as 24 different products, including Access

access alarm attackers attacks code code execution critical cve cve-2022-47966 cvss experts exploiting flaw january manageengine products remote code remote code execution score security security vulnerability sound systems takeover threat threat actors vulnerability zoho zoho manageengine