CVE-2024-5466

Name of the Vulnerable Software and Affected Versions Zohocorp ManageEngine OpManager and Remote Monitoring and Management versions 128329 and below

Description The issue concerns an authenticated remote code execution vulnerability in the deploy agent option. This allows for potential exploitation, but specific details about real-world incidents or the estimated number of affected devices are not provided.

Recommendations For versions 128329 and below, consider disabling the deploy agent option as a temporary workaround until a patch is available. Restrict access to the deploy agent functionality to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.