CVE-2014-7862: Critical severity zohocorp desktop central vulnerability
Published Jan 4, 2018
·Updated
The DCPluginServelet servlet in ManageEngine Desktop Central and Desktop Central MSP before build 90109 allows remote attackers to create administrator accounts via an addPlugInUser action.
Affected Software
2 affected components
ZohoCorp Desktop Central<90109
ZohoCorp Desktop Central>=7
Event History
Jan 4, 2018
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-7862?
CVE-2014-7862 is classified as a critical vulnerability due to its potential for remote exploitation.
2
How do I fix CVE-2014-7862?
To fix CVE-2014-7862, upgrade ManageEngine Desktop Central and Desktop Central MSP to a version later than build 90109.
3
What impact does CVE-2014-7862 have on affected systems?
CVE-2014-7862 allows remote attackers to create unauthorized administrator accounts, compromising system security.
4
Which versions of ManageEngine Desktop Central are affected by CVE-2014-7862?
ManageEngine Desktop Central and Desktop Central MSP versions prior to build 90109 are affected by CVE-2014-7862.
5
Can CVE-2014-7862 be exploited remotely?
Yes, CVE-2014-7862 can be exploited remotely, allowing attackers to gain administrative access.