Check Point Advisories

Zoho Corp ManageEngine ADSelfService Plus Denial of Service (CVE-2023-28342)

Vulnerability
Protection

Check Point Reference:	CPAI-2023-0469
Date Published:	2 Jul 2023
Severity:	High
Last Updated:	Sunday 02 July, 2023
Source:
Industry Reference:	CVE-2023-28342
Protection Provided by:	Security Gateway R81, R80, R77, R75
Who is Vulnerable?	Zoho Corp ManageEngine ADSelfService Plus 4.5 4510 Zoho Corp ManageEngine ADSelfService Plus 4.5 4511 Zoho Corp ManageEngine ADSelfService Plus 4.5 4520 Zoho Corp ManageEngine ADSelfService Plus 4.5 4522 Zoho Corp ManageEngine ADSelfService Plus 4.5 4531 Zoho Corp ManageEngine ADSelfService Plus 4.5 4540 Zoho Corp ManageEngine ADSelfService Plus 4.5 4543 Zoho Corp ManageEngine ADSelfService Plus 4.5 4544 Zoho Corp ManageEngine ADSelfService Plus 4.5 4550 Zoho Corp ManageEngine ADSelfService Plus 4.5 4560 Zoho Corp ManageEngine ADSelfService Plus 4.5 4570 Zoho Corp ManageEngine ADSelfService Plus 4.5 4571 Zoho Corp ManageEngine ADSelfService Plus 4.5 4572 Zoho Corp ManageEngine ADSelfService Plus 4.5 4580 Zoho Corp ManageEngine ADSelfService Plus 4.5 4590 Zoho Corp ManageEngine ADSelfService Plus 4.5 4591 Zoho Corp ManageEngine ADSelfService Plus 4.5 4592 Zoho Corp ManageEngine ADSelfService Plus 5.0 5000 Zoho Corp ManageEngine ADSelfService Plus 5.0 5001 Zoho Corp ManageEngine ADSelfService Plus 5.0 5002 Zoho Corp ManageEngine ADSelfService Plus 5.0 5010 Zoho Corp ManageEngine ADSelfService Plus 5.0 5011 Zoho Corp ManageEngine ADSelfService Plus 5.0 5020 Zoho Corp ManageEngine ADSelfService Plus 5.0 5021 Zoho Corp ManageEngine ADSelfService Plus 5.0 5022 Zoho Corp ManageEngine ADSelfService Plus 5.0 5030 Zoho Corp ManageEngine ADSelfService Plus 5.0 5032 Zoho Corp ManageEngine ADSelfService Plus 5.0 5040 Zoho Corp ManageEngine ADSelfService Plus 5.0 5041 Zoho Corp ManageEngine ADSelfService Plus 5.0.6 Zoho Corp ManageEngine ADSelfService Plus 5.1 5100 Zoho Corp ManageEngine ADSelfService Plus 5.1 5101 Zoho Corp ManageEngine ADSelfService Plus 5.1 5102 Zoho Corp ManageEngine ADSelfService Plus 5.1 5103 Zoho Corp ManageEngine ADSelfService Plus 5.1 5104 Zoho Corp ManageEngine ADSelfService Plus 5.1 5105 Zoho Corp ManageEngine ADSelfService Plus 5.1 5106 Zoho Corp ManageEngine ADSelfService Plus 5.1 5107 Zoho Corp ManageEngine ADSelfService Plus 5.1 5108 Zoho Corp ManageEngine ADSelfService Plus 5.1 5109 Zoho Corp ManageEngine ADSelfService Plus 5.1 5110 Zoho Corp ManageEngine ADSelfService Plus 5.1 5111 Zoho Corp ManageEngine ADSelfService Plus 5.1 5112 Zoho Corp ManageEngine ADSelfService Plus 5.1 5113 Zoho Corp ManageEngine ADSelfService Plus 5.1 5114 Zoho Corp ManageEngine ADSelfService Plus 5.1 5115 Zoho Corp ManageEngine ADSelfService Plus 5.1 5116 Zoho Corp ManageEngine ADSelfService Plus 5.2 5200 Zoho Corp ManageEngine ADSelfService Plus 5.2 5201 Zoho Corp ManageEngine ADSelfService Plus 5.2 5202 Zoho Corp ManageEngine ADSelfService Plus 5.2 5203 Zoho Corp ManageEngine ADSelfService Plus 5.2 5204 Zoho Corp ManageEngine ADSelfService Plus 5.2 5205 Zoho Corp ManageEngine ADSelfService Plus 5.2 5206 Zoho Corp ManageEngine ADSelfService Plus 5.2 5207 Zoho Corp ManageEngine ADSelfService Plus 5.3 5300 Zoho Corp ManageEngine ADSelfService Plus 5.3 5301 Zoho Corp ManageEngine ADSelfService Plus 5.3 5302
Vulnerability Description	A denial-of-service vulnerability exists in Zoho Corp ManageEngine ADSelfService Plus. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system.

Protection Overview

This protection detects attempts to exploit this vulnerability.

In order for the protection to be activated, update your Security Gateway product to the latest IPS update. For information on how to update IPS, go to SBP-2006-05, click on Protection tab and select the version of your choice.

Security Gateway R81 / R80 / R77 / R75

In the IPS tab, click Protections and find the Zoho Corp ManageEngine ADSelfService Plus Denial of Service (CVE-2023-28342) protection using the Search tool and Edit the protection's settings.
Install policy on all Security Gateways.

This protection's log will contain the following information:

Attack Name: Web Server Enforcement Violation.
Attack Information: Zoho Corp ManageEngine ADSelfService Plus Denial of Service (CVE-2023-28342)