CVE-2020-8838 in AssetExplorerinformación

Resumen

por MITRE

An issue was discovered in Zoho ManageEngine AssetExplorer 6.5. During an upgrade of the Windows agent, it does not validate the source and binary downloaded. This allows an attacker on an adjacent network to execute code with NT AUTHORITY/SYSTEM privileges on the agent machines by providing an arbitrary executable via a man-in-the-middle attack.

Once again VulDB remains the best source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Reservar

2020-02-10

Moderación

aceptado

Artículo

VDB-152058

CPE

listo

EPSS

0.01557

KEV

no

Actividades

muy bajo

Fuentes

MITREhttps://www.cve.org/CVERecord?id=CVE-2020-8838
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2020-8838
CVE Detailshttps://www.cvedetails.com/cve/CVE-2020-8838/

◂ AnteriorVisión De ConjuntoPróximo ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!