CVE-2018-13411

HIGH 8.8CVE-2018-13411 · Published 12/09/2018 · updated 17/06/2026

In short

CVE-2018-13411 is a HIGH (CVSS 8.8) vulnerability affecting manageengine desktop central (zohocorp).
Chance of exploitation in the next 30 days (EPSS): 3.5%, higher than 89.1% of all vulnerabilities.
Fix: update to 10.0.282 or later.

Package	Affected versions	Patched versions
manageengine desktop central zohocorp	`< 10.0.282`	`10.0.282`

Description

An issue was discovered in Zoho ManageEngine Desktop Central before 10.0.282. A clickable company logo in a window running as SYSTEM can be abused to escalate privileges. In cloud, the issue is fixed in 10.0.470 agent version.

References

securityfocus.com/bid/105348 · Third Party Advisory
AJ-SA/Zoho-ManageEngine · Exploit
manageengine.com/products/desktop-central/elevation-of-system-privilege.html · Vendor Advisory

More vulnerabilities in manageengine desktop central

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

manageengine desktop central

zohocorp

< 10.0.282

10.0.282

More vulnerabilities in manageengine desktop central

See all →