CVE-2017-7213
CriticalSummary
Zoho ManageEngine Desktop Central before build 100082 allows remote attackers to obtain control over all connected active desktops via unspecified vectors.
Risk Assessment
Attackers may gain control over systems within the organization, leading to potential data breaches and loss of confidentiality.
Recommendation
It is recommended to upgrade to the latest version of Zoho ManageEngine Desktop Central to mitigate this vulnerability.
Other vulnerabilities in Zoho ManageEngine Desktop Central
See all- CVE-2014-5006High
Directory traversal vulnerability in ZOHO ManageEngine Desktop Central (DC) before version 9 build 90055 allows remote attackers to execute arbitrary code via a .. (dot dot) in the fileName parameter to mdm/mdmLogUploader.
- CVE-2014-5005High
Directory traversal vulnerability in ZOHO ManageEngine Desktop Central before version 9 build 90055 allows remote attackers to execute arbitrary code via a .. (dot dot) in the fileName parameter in an LFU action to statusUpdate.
- CVE-2017-11346Critical
Zoho ManageEngine Desktop Central before build 100092 allows remote attackers to execute arbitrary code via vectors involving the upload of help desk videos.
Original NVD description (English source)
Zoho ManageEngine Desktop Central before build 100082 allows remote attackers to obtain control over all connected active desktops via unspecified vectors.