CVE-2024-10203: Agent Arbitrary File Deletion
Published Nov 7, 2024
·Updated
Zohocorp ManageEngine EndPoint Central versions 11.3.2416.21 and below, 11.3.2428.9 and below are vulnerable to Arbitrary File Deletion in the agent installed machines.
Affected Software
3 affected components
Zohocorp ManageEngine Endpoint Central<=11.3.2416.21, <=11.3.2428.9
Zohocorp ManageEngine Endpoint Central<=11.3.2416.21
Zohocorp ManageEngine Endpoint Central>=11.3.2428.01<=11.3.2428.09
Event History
Nov 7, 2024
CVE Published
via MITRE·09:20 AM
Data Sourced
via MITRE·09:20 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·10:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-10203?
The severity of CVE-2024-10203 is considered significant due to the potential for arbitrary file deletion on affected systems.
2
How do I fix CVE-2024-10203?
To fix CVE-2024-10203, upgrade to the latest version of Zohocorp ManageEngine EndPoint Central that is not vulnerable.
3
Which versions of ManageEngine EndPoint Central are affected by CVE-2024-10203?
CVE-2024-10203 affects ManageEngine EndPoint Central versions 11.3.2416.21 and below, and 11.3.2428.9 and below.
4
What type of vulnerability is CVE-2024-10203?
CVE-2024-10203 is classified as an Arbitrary File Deletion vulnerability.
5
What impact can CVE-2024-10203 have on my system?
CVE-2024-10203 can allow an attacker to delete arbitrary files from machines with the vulnerable endpoint agent installed.