Zero day Vulnerability - Need immediate attention! Desktop Central Server might be compromised
Some versions of Desktop Central Server contain an unauthenticated remote code execution vulnerability (originally reported by Steven Seeley of Source Incite).
Since this vulnerability has been declared as "Zero Day - Vulnerability", we could see that some of the enterprises were targeted and few customers network compromised. Ever since this vulnerability was brought to our notice, we have tried to reach you through a couple of security advisories, forum posts, in-product messages, and we are also calling customers to ensure that you mitigate this vulnerability as soon as possible.
We strongly recommend that you follow the steps to secure your Desktop Central Server:
- 1. On a proactive note, we want you to quarantine the DC server from your network.
- 2. Identify if the DC server/Network is compromised.
- 3. If there are any traces of the exploit, how to mitigate/remediate it, which includes back up and restore of the instance or wiping the corrupted files.
- 4. If your DC server/network is safe, how to secure it further in a proactive note
Please refer this article for detailed steps:
Identification and mitigation of remote code execution vulnerability CVE-2020-10189
