CVE-2020-10189: Zoho ManageEngine Desktop Central File Upload

Zoho ManageEngine Desktop Central File Upload Vulnerability. Zoho ManageEngine Desktop Central contains a file upload vulnerability that allows for unauthenticated remote code execution.

• CISA KEV-listed (remediation due 2022-05-03)
• EPSS 99.9% (100.0% percentile)
• CVSS 9.8 critical

Detection rules

• Exploited CVE-2020-10189 Zoho ManageEngine high

Exploiting malware & tools

• BITSAdmin

Linked threat actors

• MirrorFace machine-inferred link
• HEXANE machine-inferred link
• APT41 machine-inferred link
• Storm-1811 machine-inferred link
• Daggerfly machine-inferred link
• APT40 machine-inferred link
• Tropic Trooper machine-inferred link
• Ferocious Kitten machine-inferred link
• Conti machine-inferred link

Browse the CVE database

Read the full analysis on IntelFusions