CVE Catalog
CVE-2015-8249
CriticalSummary
The FileUploadServlet class in ManageEngine Desktop Central 9 before build 91093 allows remote attackers to upload and execute arbitrary files via the ConnectionId parameter.
Risk Assessment
Attackers can exploit this vulnerability to remotely execute malicious code, potentially leading to serious security breaches within the organization.
Recommendation
It is recommended to update ManageEngine Desktop Central to version 91093 or later to mitigate this vulnerability.
Original NVD description (English source)
The FileUploadServlet class in ManageEngine Desktop Central 9 before build 91093 allows remote attackers to upload and execute arbitrary files via the ConnectionId parameter.