VULNERABILITY INTELLIGENCE

CVE-2019-17421

CVSS score7.8 HIGH

EPSS probability0.55%

CISA KEVNot currently listed

Published2019-11-21

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

Incorrect file permissions on the packaged Nipper executable file in Zoho ManageEngine OpManager 12.4.072 and Firewall Analyzer 12.4.072 allow local users to elevate privileges to root by overwriting this file with a malicious payload.

Weakness classification

nvd@nist.gov: CWE-276

Primary references

cve@mitre.org — Third Party Advisory
cve@mitre.org — Exploit, Third Party Advisory
cve@mitre.org — Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory