CVE-2023-47211

CRITICALNuclei

ManageEngine OpManager - Directory Traversal

Title source: github.com
STIX 2.1 vulnerability

Record summary

CVE-2023-47211 has a selected CVSS score of 9.1 (critical); EIP currently links 1 Nuclei template.

Description

A directory traversal vulnerability exists in the uploadMib functionality of ManageEngine OpManager 12.7.258. A specially crafted HTTP request can lead to arbitrary file creation. An attacker can send a malicious MiB file to trigger this vulnerability.

Description source: CVE List

Exploitation context

Available material

Nuclei templates
1

CISA SSVC decision

ExploitationPoC
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated May 8, 2025 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

OpManager

Browse ManageEngine / OpManager
CVE List12.7.258affected

Nuclei templates

1
ProjectDiscoveryHIGHManageEngine OpManager - Directory TraversalCVSS 8.6

A directory traversal vulnerability exists in the uploadMib functionality of ManageEngine OpManager 12.7.258. A specially crafted HTTP request can lead to arbitrary file creation. An attacker can send a malicious MiB file to trigger this vulnerability.

Impact

Unauthenticated attackers can write arbitrary files to the system via path traversal, potentially creating backdoors or compromising system integrity.

Remediation

Update ManageEngine OpManager to version 12.7.259 or later.

WeaknessesCWE-22
Authorsgy741
Template tagscvecve2023zohomanageengineauthenticatedtraversallfiintrusivezohocorpvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
CPE: cpe:2.3:a:zohocorp:manageengine_firewall_analyzer:*:*:*:*:*:*:*:*
Shodan: http.title:"OpManager Plus"
Shodan: http.title:"opmanager plus"
FOFA: title="opmanager plus"
Google: intitle:"opmanager plus"
https://talosintelligence.com/vulnerability_reports/TALOS-2023-1851 https://nvd.nist.gov/vuln/detail/CVE-2023-47211 https://github.com/fkie-cad/nvd-json-data-feeds

Source: ProjectDiscovery

References

4