CVE-2020-24397

An issue was discovered in the client side of Zoho ManageEngine Desktop Central 10.0.0.SP-534

published October 2, 2020

CVSS
—
EPSS
15%
Percentile
96.8
In the wild
Unconfirmed
What it is

An issue was discovered in the client side of Zoho ManageEngine Desktop Central 10.0.0.SP-534. An attacker-controlled server can trigger an integer overflow in InternetSendRequestEx and InternetSendRequestByBitrate that leads to a heap-based buffer overflow and Remote Code Execution with SYSTEM privileges.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.15418 · 96.8th percentile
Published
2020-10-02T19:06Z
EPSS history
Timeline
  • 23 SEP 03:21Z
    EPSS moved 28% → 15%
    epss
  • 02 OCT 19:06Z
    An issue was discovered in the client side of Zoho ManageEngine Desktop Central 10.0.0.SP-534
    cvelistv5