Rewterz
Rewterz Threat Alert – Lazarus FastCash Activity – IOC’s
March 7, 2020
Rewterz
Rewterz Threat Alert – Emotet Wi-Fi Spreader Upgraded
March 10, 2020

Rewterz Threat Advisory – CVE-2020-10189 – Zoho Critical Zero-Day Flaw Disclosed

Severity

High

Analysis Summary

This vulnerability allows remote attackers to execute arbitrary code on affected installations of ManageEngine Desktop Central. Authentication is not required to exploit this vulnerability.

Impact

Remote Code Execution

Affected Vendors

Zoho

Affected Products

ManageEngine Desktop Central build 10.0.473 and below

Remediation

Please update to the latest version 10.0.479

Updated patches can be found at

https://www.manageengine.com/products/desktop-central/service-packs.html