Technical impact
ManageEngine DDI Central versions below 6201 contain a command injection flaw in the Windows DNS Query Resolution Policy name field. An attacker who supplies arbitrary PowerShell input can cause the system to execute those commands on the host, resulting in full compromise of confidentiality, integrity, and availability of the affected device.
Affected Systems
Zohocorp DDI Central (ManageEngine DDI Central) versions prior to 6201 are affected. The flaw resides in the DNS Query Resolution Policy feature and applies to installations running any build lower than 6201.
Risk and Exploitability
The CVSS score of 7.2 classifies the vulnerability as high severity. The EPSS score of 4% indicates a low to moderate risk of exploitation, and the vulnerability is not listed in CISA KEV. Based on the description, it is inferred that an authenticated user who can access the DNS Query Resolution Policy configuration field is required to exploit this flaw. Once arbitrary PowerShell input is injected into the name field, the injection is executed with the privileges of the running service, providing full remote code execution.
