VulnerabilitycriticalExploited in the wild

CISA Warns of Actively Exploited Critical Zoho ManageEngine ServiceDesk Vulnerability

The Hacker Newsby @TheHackersNewsDec 3, 2021 · 13:34 UTC (Dec 3, 2021)2 min read2 · 1 read

Read at thehackernews.com

Analyze CVE-2021-44077 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2021-44077 CVE-2021-40539

Tags: cve-2021-44077 cve-2021-40539 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-40539	Unauthenticated RCE via REST API auth bypass in Zoho ManageEngine ADSelfService Plus	9.8	99%	KEVRansomwarePoC	Sep 7, 2021 KEV Nov 3, 2021
CVE-2021-44077	Unauthenticated RCE in Zoho ManageEngine ServiceDesk Plus and SupportCenter Plus	9.8	94%	KEVPoC	Nov 29, 2021 KEV Dec 1, 2021

From the original article

2 min read at thehackernews.com

The U. S. Federal Bureau of Investigation (FBI) and the Cybersecurity and Infrastructure Security Agency (CISA) are warning of active exploitation of a newly patched flaw in Zoho's ManageEngine ServiceDesk Plus product to deploy web shells and carry out an array of malicious activities.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.