Threats tagged 'ghsa-xwj8-4q5p-8r7j'

Zoho Corporation ManageEngine DDI Central versions 6500 and below contain a Unicode-based command injection vulnerability in the Cisco IOS DHCP configuration functionality. This flaw allows cluster-scoped operators to inject specially crafted Unicode characters, potentially causing execution of unintended device commands. The vulnerability has a high severity score of 8.0 and affects confidentiality, integrity, and availability. No specific patched versions or vendor advisories are provided in the data.