Description
Zoho Corporation ManageEngine DDI Central versions 6500 and below are vulnerable to a Unicode-based command injection vulnerability in the Cisco IOS DHCP configuration functionality. This vulnerability could allow cluster-scoped operators to inject specially crafted Unicode characters, resulting in the execution of unintended device commands.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Zohocorp | DDI Central | < 6500 | 6500 |