CVE:CVE-2023-26601
CNNVD:CNNVD-202303-374
ZOHO ManageEngine ServiceDesk Plus（SDP）是美国卓豪（ZOHO）公司的一套基于ITIL架构的IT服务管理软件。该软件集成了事件管理、问题管理、资产管理IT项目管理、采购与合同管理等功能模块。
ZOHO ManageEngine ServiceDesk Plus 14104版本及之前版本、Asset Explorer 6987版本及之前版本、ServiceDesk Plus MSP 14000之前版本、Support Center Plus 14000之前版本存在安全漏洞.攻击者利用该漏洞导致系统拒绝服务。
solution:Upgrade zohocorp manageengine_assetexplorer to a higher version than 6.9,6.9,6.9:6900,6.9:6901,6.9:6902,6.9:6903,6.9:6904,6.9:6905,6.9:6906,6.9:6907,6.9:6908,6.9:6909,6.9:6950,6.9:6951,6.9:6952,6.9:6953,6.9:6954,6.9:6955,6.9:6956,6.9:6957,6.9:6970,6.9:6971,6.9:6972,6.9:6973,6.9:6974,6.9:6975,6.9:6976,6.9:6977,6.9:6978,6.9:6979,6.9:6980,6.9:6981,6.9:6982,6.9:6983,6.9:6984,6.9:6985,6.9:6986,6.9:6987,and avoid the version (,6.9),6.9,6.9:6900,6.9:6901,6.9:6902,6.9:6903,6.9:6904,6.9:6905,6.9:6906,6.9:6907,6.9:6908,6.9:6909,6.9:6950,6.9:6951,6.9:6952,6.9:6953,6.9:6954,6.9:6955,6.9:6956,6.9:6957,6.9:6970,6.9:6971,6.9:6972,6.9:6973,6.9:6974,6.9:6975,6.9:6976,6.9:6977,6.9:6978,6.9:6979,6.9:6980,6.9:6981,6.9:6982,6.9:6983,6.9:6984,6.9:6985,6.9:6986,6.9:6987; Upgrade zohocorp manageengine_servicedesk_plus to a higher version than 14.1,14.1,14.1:14100,14.1:14101,14.1:14102,14.1:14103,and avoid the version (,14.1),14.1,14.1:14100,14.1:14101,14.1:14102,14.1:14103; Upgrade zohocorp manageengine_servicedesk_plus_msp to a higher version than 14.0,14.0:14000,and avoid the version (,14.0),14.0:14000; Upgrade zohocorp manageengine_supportcenter_plus to a higher version than 14.0,14.0:14000,and avoid the version (,14.0),14.0:14000