9.8

CVE-2020-28653

Exploit
Zoho ManageEngine OpManager Stable build before 125203 (and Released build before 125233) allows Remote Code Execution via the Smart Update Manager (SUM) servlet.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Zohocorp ≫ Manageengine Opmanager Version < 12.5
Zohocorp ≫ Manageengine Opmanager Version 12.5 Update build125000
Zohocorp ≫ Manageengine Opmanager Version 12.5 Update build125002
Zohocorp ≫ Manageengine Opmanager Version 12.5 Update build125100
Zohocorp ≫ Manageengine Opmanager Version 12.5 Update build125101
Zohocorp ≫ Manageengine Opmanager Version 12.5 Update build125102
Zohocorp ≫ Manageengine Opmanager Version 12.5 Update build125108
Zohocorp ≫ Manageengine Opmanager Version 12.5 Update build125110
Zohocorp ≫ Manageengine Opmanager Version 12.5 Update build125111
Zohocorp ≫ Manageengine Opmanager Version 12.5 Update build125112
Zohocorp ≫ Manageengine Opmanager Version 12.5 Update build125113
Zohocorp ≫ Manageengine Opmanager Version 12.5 Update build125114
Zohocorp ≫ Manageengine Opmanager Version 12.5 Update build125116
Zohocorp ≫ Manageengine Opmanager Version 12.5 Update build125117
Zohocorp ≫ Manageengine Opmanager Version 12.5 Update build125118
Zohocorp ≫ Manageengine Opmanager Version 12.5 Update build125120
Zohocorp ≫ Manageengine Opmanager Version 12.5 Update build125121
Zohocorp ≫ Manageengine Opmanager Version 12.5 Update build125123
Zohocorp ≫ Manageengine Opmanager Version 12.5 Update build125124
Zohocorp ≫ Manageengine Opmanager Version 12.5 Update build125125
Zohocorp ≫ Manageengine Opmanager Version 12.5 Update build125136
Zohocorp ≫ Manageengine Opmanager Version 12.5 Update build125137
Zohocorp ≫ Manageengine Opmanager Version 12.5 Update build125139
Zohocorp ≫ Manageengine Opmanager Version 12.5 Update build125140
Zohocorp ≫ Manageengine Opmanager Version 12.5 Update build125143
Zohocorp ≫ Manageengine Opmanager Version 12.5 Update build125144
Zohocorp ≫ Manageengine Opmanager Version 12.5 Update build125145
Zohocorp ≫ Manageengine Opmanager Version 12.5 Update build125156
Zohocorp ≫ Manageengine Opmanager Version 12.5 Update build125157
Zohocorp ≫ Manageengine Opmanager Version 12.5 Update build125158
Zohocorp ≫ Manageengine Opmanager Version 12.5 Update build125159
Zohocorp ≫ Manageengine Opmanager Version 12.5 Update build125161
Zohocorp ≫ Manageengine Opmanager Version 12.5 Update build125163
Zohocorp ≫ Manageengine Opmanager Version 12.5 Update build125174
Zohocorp ≫ Manageengine Opmanager Version 12.5 Update build125175
Zohocorp ≫ Manageengine Opmanager Version 12.5 Update build125176
Zohocorp ≫ Manageengine Opmanager Version 12.5 Update build125177
Zohocorp ≫ Manageengine Opmanager Version 12.5 Update build125178
Zohocorp ≫ Manageengine Opmanager Version 12.5 Update build125180
Zohocorp ≫ Manageengine Opmanager Version 12.5 Update build125181
Zohocorp ≫ Manageengine Opmanager Version 12.5 Update build125192
Zohocorp ≫ Manageengine Opmanager Version 12.5 Update build125193
Zohocorp ≫ Manageengine Opmanager Version 12.5 Update build125194
Zohocorp ≫ Manageengine Opmanager Version 12.5 Update build125195
Zohocorp ≫ Manageengine Opmanager Version 12.5 Update build125196
Zohocorp ≫ Manageengine Opmanager Version 12.5 Update build125197
Zohocorp ≫ Manageengine Opmanager Version 12.5 Update build125198
Zohocorp ≫ Manageengine Opmanager Version 12.5 Update build125201
Zohocorp ≫ Manageengine Opmanager Version 12.5 Update build125204
Zohocorp ≫ Manageengine Opmanager Version 12.5 Update build125212
Zohocorp ≫ Manageengine Opmanager Version 12.5 Update build125213
Zohocorp ≫ Manageengine Opmanager Version 12.5 Update build125214
Zohocorp ≫ Manageengine Opmanager Version 12.5 Update build125215
Zohocorp ≫ Manageengine Opmanager Version 12.5 Update build125216
Zohocorp ≫ Manageengine Opmanager Version 12.5 Update build125228
Zohocorp ≫ Manageengine Opmanager Version 12.5 Update build125229
Zohocorp ≫ Manageengine Opmanager Version 12.5 Update build125230
Zohocorp ≫ Manageengine Opmanager Version 12.5 Update build125231
Zohocorp ≫ Manageengine Opmanager Version 12.5 Update build125232
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 78.7% 0.995
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NIST 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://packetstormsecurity.com/files/164231/ManageEngine-OpManager-SumPDU-Java-Deserialization.html
Third Party Advisory
Exploit
VDB Entry
https://www.manageengine.com/network-monitoring/help/read-me-complete.html#125203
Vendor Advisory
Release Notes
https://www.manageengine.com/network-monitoring/help/read-me-complete.html#125233
Vendor Advisory
Release Notes