CVE-2018-16364: Critical severity manageengine applications manager vulnerability
Published Sep 26, 2018
·Updated
A serialization vulnerability in Zoho ManageEngine Applications Manager before build 13740 allows for remote code execution on Windows via a payload on an SMB share.
Affected Software
10 affected components
ZohoCorp ManageEngine Applications Manager=13.7
ZohoCorp ManageEngine Applications Manager=13.7-build13700
ZohoCorp ManageEngine Applications Manager=13.7-build13710
ZohoCorp ManageEngine Applications Manager=13.7-build13720
ZohoCorp ManageEngine Applications Manager=13.7-build13730
ZohoCorp ManageEngine Applications Manager=13.7-build13750
ZohoCorp ManageEngine Applications Manager=13.7-build13760
ZohoCorp ManageEngine Applications Manager=13.7-build13770
ZohoCorp ManageEngine Applications Manager=13.7-build13780
ZohoCorp ManageEngine Applications Manager=13.7-build13790
Event History
Sep 26, 2018
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Frequently Asked Questions
1
What is CVE-2018-16364?
CVE-2018-16364 is a serialization vulnerability in Zoho ManageEngine Applications Manager before build 13740.
2
How does CVE-2018-16364 allow for remote code execution?
CVE-2018-16364 allows for remote code execution on Windows via a payload on an SMB share.
3
What is the severity of CVE-2018-16364?
CVE-2018-16364 has a severity rating of 8.1 (High).
4
Which software versions are affected by CVE-2018-16364?
Zoho ManageEngine Applications Manager versions 13.7 to build 13740 are affected by CVE-2018-16364.
5
How can I fix CVE-2018-16364?
To fix CVE-2018-16364, users should update to Zoho ManageEngine Applications Manager build 13740 or later.