VulnerabilitycriticalExploited in the wild

Zoho fixes a critical vulnerability (CVE-2021

Security Affairsby @securityaffairsJan 17, 2022 · 20:42 UTC (Jan 17, 2022)1 min read3

Read at securityaffairs.com

Analyze CVE-2021-44757 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2021-44757 CVE-2021-44515

Tags: cve-2021-44757 cve-2021-44515 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-44515	Authentication Bypass Leading to RCE in Zoho ManageEngine Desktop Central	9.8	100%	KEVPoC	Dec 12, 2021 KEV Dec 10, 2021
CVE-2021-44757	Zoho ManageEngine Desktop Central before 10.1.2137.9 and Desktop Central MSP before 10.1.2137.9 allow attackers to bypass authentication, and read sensitive…	9.1	24%		Jan 18, 2022

From the original article

1 min read at securityaffairs.com

Zoho addressed a new critical severity flaw (CVE-2021-44757) that affects its Desktop Central and Desktop Central MSP unified endpoint management (UEM) solutions Zoho fixed a new critical severity flaw, tracked as CVE-2021-44757, that affects its Desktop Central and Desktop Central MSP unified endpoint management (UEM) solutions.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.