Manageengine Malware Protection Plus
Monthly
Insufficient driver signature validation in the MEARWService component of Zoho Corp's ManageEngine Malware Protection Plus (all versions before 1.0.64.12) allows an attacker who already holds administrative rights on the endpoint and has local or physical access to load a driver that the service fails to validate. Successful abuse can extend beyond the service into the kernel, yielding high confidentiality, integrity, and availability impact (scope-changed), though the AV:P/PR:H vendor vector and the need for pre-existing admin plus physical presence keep this a low-to-moderate real-world priority. The issue is patched in 1.0.64.12, no public exploit code has been identified, and there is no confirmed active exploitation (not in CISA KEV) at time of analysis.
Insufficient driver signature validation in the MEARWService component of Zoho Corp's ManageEngine Malware Protection Plus (all versions before 1.0.64.12) allows an attacker who already holds administrative rights on the endpoint and has local or physical access to load a driver that the service fails to validate. Successful abuse can extend beyond the service into the kernel, yielding high confidentiality, integrity, and availability impact (scope-changed), though the AV:P/PR:H vendor vector and the need for pre-existing admin plus physical presence keep this a low-to-moderate real-world priority. The issue is patched in 1.0.64.12, no public exploit code has been identified, and there is no confirmed active exploitation (not in CISA KEV) at time of analysis.