CVE-2018-11138Used in ransomware
Quest KACE System Management Appliance
Quest KACE System Management Appliance Remote Command Execution Vulnerability
What it is
The '/common/download_agent_installer.php' script in the Quest KACE System Management Appliance is accessible by anonymous users and can be abused to perform remote code execution.
What to do
Apply updates per vendor instructions.
Vendor notices and references
Description and required action as published by CISA. Full record at NVD.