Vulnerabilitycritical

Zoho Releases Patch for Critical Flaw Affecting ManageEngine Desktop Central

The Hacker Newsby @TheHackersNewsJan 18, 2022 · 10:03 UTC (Jan 18, 2022)1 min read2 · 1 read

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2021-44757 CVE-2021-40539 CVE-2021-44077 CVE-2021-44515

Tags: cve-2021-44757 cve-2021-40539 cve-2021-44077 cve-2021-44515 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-40539	Unauthenticated RCE via REST API auth bypass in Zoho ManageEngine ADSelfService Plus	9.8	99%	KEVRansomwarePoC	Sep 7, 2021 KEV Nov 3, 2021
CVE-2021-44077	Unauthenticated RCE in Zoho ManageEngine ServiceDesk Plus and SupportCenter Plus	9.8	94%	KEVPoC	Nov 29, 2021 KEV Dec 1, 2021
CVE-2021-44515	Authentication Bypass Leading to RCE in Zoho ManageEngine Desktop Central	9.8	100%	KEVPoC	Dec 12, 2021 KEV Dec 10, 2021
CVE-2021-44757	Zoho ManageEngine Desktop Central before 10.1.2137.9 and Desktop Central MSP before 10.1.2137.9 allow attackers to bypass authentication, and read sensitive…	9.1	24%		Jan 18, 2022

From the original article

1 min read at thehackernews.com

Enterprise software maker Zoho on Monday issued patches for a critical security vulnerability in Desktop Central and Desktop Central MSP that a remote adversary could exploit to perform unauthorized actions in affected servers.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.