Exploit / PoCcriticalExploited in the wild

Warning: Yet Another Zoho ManageEngine Product Found Under Active Attacks

The Hacker Newsby @TheHackersNewsDec 4, 2021 · 05:09 UTC (Dec 4, 2021)1 min read1 · 1 read

Read at thehackernews.com

Analyze CVE-2021-44515 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2021-44515 CVE-2021-44077 CVE-2021-40539

Tags: cve-2021-44515 cve-2021-44077 cve-2021-40539 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-40539	Unauthenticated RCE via REST API auth bypass in Zoho ManageEngine ADSelfService Plus	9.8	99%	KEVRansomwarePoC	Sep 7, 2021 KEV Nov 3, 2021
CVE-2021-44077	Unauthenticated RCE in Zoho ManageEngine ServiceDesk Plus and SupportCenter Plus	9.8	93%	KEVPoC	Nov 29, 2021 KEV Dec 1, 2021
CVE-2021-44515	Authentication Bypass Leading to RCE in Zoho ManageEngine Desktop Central	9.8	100%	KEVPoC	Dec 12, 2021 KEV Dec 10, 2021

From the original article

1 min read at thehackernews.com

Enterprise software provider Zoho on Friday warned that a newly patched critical flaw in its Desktop Central and Desktop Central MSP is being actively exploited by malicious actors, marking the third security vulnerability in its products to be abused in the wild in a span of four months.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.