CVE-2021-44515criticalunder attack

CVE-2021-44515

Published · Updated

Follow this CVE+ Monitor Desktop Central

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

95Vexday Risk Score

Patch now. It under exploitation confirmed by CISA and has a working public exploit.

ssvc Actcvss 9.8epss 100%
from disclosure to weapon
Published on NVDDec 12
CISA KEVDec 10
Action required by CISAfederal deadline: 2021-12-24

Apply updates per vendor instructions.

In short

Zoho ManageEngine Desktop Central allows attackers to bypass authentication and execute arbitrary code on the server without proper credentials, a critical flaw that was actively exploited in December 2021.

Technical detail

Authentication bypass vulnerability in Zoho ManageEngine Desktop Central enables unauthenticated remote code execution on affected server instances; exploitation vector allows direct access to administrative functions without valid credentials, affecting Enterprise and MSP builds up to specified versions.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

Zoho ManageEngine Desktop Central is vulnerable to authentication bypass, leading to remote code execution on the server, as exploited in the wild in December 2021. For Enterprise builds 10.1.2127.17 and earlier, upgrade to 10.1.2127.18. For Enterprise builds 10.1.2128.0 through 10.1.2137.2, upgrade to 10.1.2137.3. For MSP builds 10.1.2127.17 and earlier, upgrade to 10.1.2127.18. For MSP builds 10.1.2128.0 through 10.1.2137.2, upgrade to 10.1.2137.3.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
n/a · n/a