CVE-2020-8838 is a vulnerability in Zoho Corp Manageengine Assetexplorer
Published on March 23, 2020
An issue was discovered in Zoho ManageEngine AssetExplorer 6.5. During an upgrade of the Windows agent, it does not validate the source and binary downloaded. This allows an attacker on an adjacent network to execute code with NT AUTHORITY/SYSTEM privileges on the agent machines by providing an arbitrary executable via a man-in-the-middle attack.
Products Associated with CVE-2020-8838
Want to know whenever a new CVE is published for Zoho Corp Manageengine Assetexplorer? stack.watch will email you.
Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.