exploit/windows/http/desktopcentral_deserialization

weaponized

ManageEngine Desktop Central Java Deserialization

view exploit source metasploittype exploitpublished 2020-03-05catalog metasploit

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2020-10189US	critical9.8OT critical	99.9% (100th)	KEV	2020-03-06
Zoho ManageEngine Desktop Central before 10.0.474 allows remote code execution because of deserialization of untrusted data in getChartImage in the FileStorage class. This is relat…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.