CVE-2017-11346

Zoho ManageEngine Desktop Central before build 100092 allows remote attackers to execute arbitrary code via vectors involving the upload of help desk videos.

Score

CVSS 3.0 9.8 Critical

Status

Modified - cve@mitre.org

Published

2017-07-17

Last modified

2024-08-05

Weaknesses

CWE-20

Affected products

• Manageengine Desktop Central (Zohocorp)

References

• https://www.exploit-db.com/exploits/42358/
• https://www.manageengine.com/products/desktop-central/remote-code-execution.html