CVE-2024-10203

CVSS 3.1 Score 7 of 10 (high)

Details

Published Nov 7, 2024
Updated: Nov 8, 2024
CWE ID 269

Summary

CVE-2024-10203 is a newly disclosed cybersecurity vulnerability affecting Zohocorp ManageEngine EndPoint Central. Versions 11.3.2416.21 and below, as well as 11.3.2428.9 and below, are reportedly susceptible to Arbitrary File Deletion. An attacker can exploit this vulnerability by targeting the agent installed on affected machines, potentially leading to data loss or system compromise. The precise method of exploitation is not yet known, but it is recommended that users update to the latest version of EndPoint Central to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • ManageEngine Endpoint Central

Affected Vendors

  • Manage Engine