Security News > 2020 > March > Zoho Working on Patch for Zero-Day Vulnerability in ManageEngine Product

Zoho Working on Patch for Zero-Day Vulnerability in ManageEngine Product
2020-03-06 13:50

Business tools development company Zoho says it's working on a patch for a zero-day vulnerability affecting its ManageEngine Desktop Central product.

"Since Zoho typically ignores researchers, I figured it was OK to share a ManageEngine Desktop Central zero-day exploit with everyone," Seeley wrote on Twitter.

In response to Seeley's tweet, Zoho said it identified the issue and has started working on a patch "With top priority."

A researcher from Microsoft pointed out that Shodan currently lists over 2,300 internet-exposed instances of ManageEngine Desktop Central, which increases the chances of malicious hackers targeting the vulnerability disclosed by Seeley.

"Administration tools, such as Zoho ManageEngine Desktop Central, make for desirable targets," Rick Holland, CISO and VP of strategy at Digital Shadows, told SecurityWeek.


News URL

http://feedproxy.google.com/~r/Securityweek/~3/17dDxmR-MbU/zoho-working-patch-zero-day-vulnerability-manageengine-product

Related vendor

VENDOR LAST 12M #/PRODUCTS LOW MEDIUM HIGH CRITICAL TOTAL VULNS
Manageengine 9 0 3 4 3 10
Zoho 4 0 3 4 0 7