Skip to content
NewA calmer, faster ZeroHour
Exploit / PoCcritical

Attackers exploit another zero-day in ManageEngine software (CVE-2021-44515)

Help Net Securityby @zeljkazorz ()1 min read3
Read at helpnetsecurity.com
Analyze CVE-2021-44515 with Vani AIImpact, affected versions, exploitation, mitigations and detection
CVEs
CVE-2021-44515CVE-2021-44077
Tags
cve-2021-44515cve-2021-44077exploit

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2021-44077
Unauthenticated RCE in Zoho ManageEngine ServiceDesk Plus and SupportCenter Plus
9.893%KEVPoC
KEV
CVE-2021-44515
Authentication Bypass Leading to RCE in Zoho ManageEngine Desktop Central
9.8100%KEVPoC
KEV

From the original article

1 min read at helpnetsecurity.com

A vulnerability (CVE-2021-44515) in ManageEngine Desktop Central is being leveraged in attacks in the wild to gain access to server running the vulnerable software. CVE-2021-44515 is an authentication bypass vulnerability that could be triggered by attackers by sending a specially crafted request, with the goal of achieving unauthenticated remote code execution.

Help Net Security

By @zeljkazorz · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.