CVE-2015-8249

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

The FileUploadServlet class in ManageEngine Desktop Central 9 before build 91093 allows remote attackers to upload and execute arbitrary files via the ConnectionId parameter.

Metrics

CVSS 3.0 9.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-434

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://packetstormsecurity.com/files/134806/ManageEngine-Desktop-Central-9-FileUploadServlet-ConnectionId.htmlExploit, Third Party Advisory, VDB Entry
http://www.rapid7.com/db/modules/exploit/windows/http/manageengine_connectionid_writeThird Party Advisory
https://community.rapid7.com/community/infosec/blog/2015/12/14/r7-2015-22-manageengine-desktop-central-9-fileuploadservlet-connectionid-vulnerability-cve-2015-8249Exploit, Patch, Technical Description, Third Party Advisory
https://www.exploit-db.com/exploits/38982/Exploit, Third Party Advisory, VDB Entry
http://packetstormsecurity.com/files/134806/ManageEngine-Desktop-Central-9-FileUploadServlet-ConnectionId.htmlExploit, Third Party Advisory, VDB Entry
http://www.rapid7.com/db/modules/exploit/windows/http/manageengine_connectionid_writeThird Party Advisory
https://community.rapid7.com/community/infosec/blog/2015/12/14/r7-2015-22-manageengine-desktop-central-9-fileuploadservlet-connectionid-vulnerability-cve-2015-8249Exploit, Patch, Technical Description, Third Party Advisory
https://www.exploit-db.com/exploits/38982/Exploit, Third Party Advisory, VDB Entry

Timeline

Published: Sep 28, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2015

CVE-2015-82515.9OpenStage 60 and OpenScape Desk Phone IP 55G SIP V3, OpenStage 15, 20E, 20 and 40 and OpenScape Desk Phone IP 35G SIP V3, OpenScape Desk Pho CVE-2015-82525.9The Frontel protocol before 3 on RSI Video Technologies Videofied devices sends a cleartext serial number, which allows remote attackers to CVE-2015-82533.7The Frontel protocol before 3 on RSI Video Technologies Videofied devices sets up AES encryption but sends all traffic in cleartext, which a CVE-2015-82545.9The Frontel protocol before 3 on RSI Video Technologies Videofied devices does not use integrity protection, which makes it easier for man-i CVE-2015-82558.8AXIS Communications products allow CSRF, as demonstrated by admin/pwdgrp.cgi, vaconfig.cgi, and admin/local_del.cgi.CVE-2015-82566.1Multiple cross-site scripting (XSS) vulnerabilities in Axis network cameras.CVE-2015-82578.8The devtools.sh script in AXIS network cameras allows remote authenticated users to execute arbitrary commands via shell metacharacters in t CVE-2015-82587.5AXIS Communications products with firmware through 5.80.x allow remote attackers to modify arbitrary files as root via vectors involving Ope CVE-2015-82619.8The DroneDeleteOldMeasurements implementation in Ipswitch WhatsUp Gold before 16.4 does not properly validate serialized XML objects, which CVE-2015-82626.8Buffalo WZR-600DHP2 devices with firmware 2.09, 2.13, and 2.16 use an improper algorithm for selecting the ID value in the header of a DNS q CVE-2015-82638.6NETGEAR WNR1000v3 devices with firmware 1.0.2.68 use the same source port number for every DNS query, which makes it easier for remote attac CVE-2015-82647.8Untrusted search path vulnerability in F-Secure Online Scanner allows remote attackers to execute arbitrary code and conduct DLL hijacking a