Exploit / PoCcriticalExploited in the wild

Zoho warns of new zero

The RecordDec 21, 2022 · 00:00 UTC (Dec 21, 2022)2 min read2

Read at therecord.media

Analyze CVE-2021-44515 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2021-44515 CVE-2021-40539 CVE-2021-44077

Tags: cve-2021-44515 cve-2021-40539 cve-2021-44077 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-40539	Unauthenticated RCE via REST API auth bypass in Zoho ManageEngine ADSelfService Plus	9.8	99%	KEVRansomwarePoC	Sep 7, 2021 KEV Nov 3, 2021
CVE-2021-44077	Unauthenticated RCE in Zoho ManageEngine ServiceDesk Plus and SupportCenter Plus	9.8	93%	KEVPoC	Nov 29, 2021 KEV Dec 1, 2021
CVE-2021-44515	Authentication Bypass Leading to RCE in Zoho ManageEngine Desktop Central	9.8	100%	KEVPoC	Dec 12, 2021 KEV Dec 10, 2021

From the original article

2 min read at therecord.media

Zoho urged customers on Friday to update their ManageEngine servers and apply a software fix that patches a zero-day vulnerability that is currently being exploited in the wild. Tracked as CVE-2021-44515 , the vulnerability impacts Zoho ManageEngine Desktop Central , an endpoint management solution that companies use to manage their workers' devices.

The Record

therecord.media

Read the full article at The Record

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.