CVE Catalog

CVE-2017-11346

Critical
Published: Translated: NVD NIST

Summary

Zoho ManageEngine Desktop Central before build 100092 allows remote attackers to execute arbitrary code via vectors involving the upload of help desk videos.

Risk Assessment

Attackers can exploit this vulnerability to gain control over the system, potentially leading to serious data security breaches.

Recommendation

It is recommended to upgrade to the latest version of Zoho ManageEngine Desktop Central to mitigate this vulnerability.

Original NVD description (English source)

Zoho ManageEngine Desktop Central before build 100092 allows remote attackers to execute arbitrary code via vectors involving the upload of help desk videos.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS