CVE-2020-10189

🗓️ 06 Mar 2020 16:05:22Reported by mitreType

cve🔗 web.nvd.nist.gov📰️ 6 Media mentions👁 1251 Views🌐 WEB

Zoho ManageEngine Desktop Central deserialization allows remote code executio

Reporter	Title	Published	Views	Family All 40
0day.today	ManageEngine Desktop Central Java Deserialization Exploit	15 Mar 202000:00	–	zdt
ICS	Potential for China Cyber Response to Heightened U.S.–China Tensions	20 Oct 202012:00	–	ics
ATTACKERKB	CVE-2020-10189	6 Mar 202000:00	–	attackerkb
BDU FSTEC	The vulnerability of the CewolfServlet and MDLogUploaderServlet, components of the software tool for managing workstations via the web interface ManageEngine Desktop Central, allows a perpetrator to execute arbitrary code.	15 May 202000:00	–	bdu_fstec
Circl	CVE-2020-10189	7 Mar 202012:05	–	circl
CISA KEV Catalog	Zoho ManageEngine Desktop Central File Upload Vulnerability	3 Nov 202100:00	–	cisa_kev
CISA	Zoho Releases Security Update on ManageEngine Desktop Central	6 Mar 202000:00	–	cisa
CNVD	Zoho ManageEngine Desktop Central Remote Code Execution Vulnerability	9 Mar 202000:00	–	cnvd
Check Point Advisories	Zoho ManageEngine Remote Code Execution (CVE-2020-10189)	8 Mar 202000:00	–	checkpoint_advisories
Cvelist	CVE-2020-10189	6 Mar 202016:05	–	cvelist

NVD

Node

Source	Link
manageengine	www.manageengine.com/products/desktop-central/remote-code-execution-vulnerability.html
zdnet	www.zdnet.com/article/zoho-zero-day-published-on-twitter/
srcincite	www.srcincite.io/advisories/src-2020-0011/
srcincite	www.srcincite.io/pocs/src-2020-0011.py.txt
packetstormsecurity	www.packetstormsecurity.com/files/156730/ManageEngine-Desktop-Central-Java-Deserialization.html
cwe	www.cwe.mitre.org/data/definitions/502.html
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog

Parameter	Position	Path	Description	CWE
udid	query param	/mdm/client/v1/mdmLogUploader	Deserialization via MDMLogUploaderServlet leads to RCE when crafted payload is written and later deserialized.	CWE-502
filename	query param	/mdm/client/v1/mdmLogUploader	Deserialization via MDMLogUploaderServlet leads to RCE when crafted payload is written and later deserialized.	CWE-502
img	query param	/cewolf/	Deserialization via CewolfServlet getChartImage reads untrusted serialized data from a file specified by img, enabling RCE.	CWE-502

17 Jun 2026 02:47Current

9.7High risk

Vulners AI Score9.7

CVSS 3.19.8

CVSS 210

CVSS 39.8

EPSS0.99941

SSVC