CVE-2021-44515: Zoho Desktop Central Authentication Bypass Vulnerability
In CISA’s Known Exploited Vulnerabilities catalog: Zoho Desktop Central Authentication Bypass Vulnerability.
Added , federal remediation due . Known ransomware use: Unknown.
Required action: Apply updates per vendor instructions.
Description
Zoho ManageEngine Desktop Central is vulnerable to authentication bypass, leading to remote code execution on the server, as exploited in the wild in December 2021. For Enterprise builds 10.1.2127.17 and earlier, upgrade to 10.1.2127.18. For Enterprise builds 10.1.2128.0 through 10.1.2137.2, upgrade to 10.1.2137.3. For MSP builds 10.1.2127.17 and earlier, upgrade to 10.1.2127.18. For MSP builds 10.1.2128.0 through 10.1.2137.2, upgrade to 10.1.2137.3.
Vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Status incidents that name it
No tracked status incident names this CVE.
Affected vendors and products
Zoho: Desktop Central
References
- CVE record on cve.org (opens in new tab)
- NVD entry (opens in new tab)
- pitstop.manageengine.com/portal/en/community/topic/an-authentication-bypass-vulnerability-iden… (opens in new tab)
- www.cisa.gov/uscert/ncas/current-activity/2021/12/10/cisa-adds-thirteen-known-expl… (opens in new tab)
- www.manageengine.com/products/desktop-central/cve-2021-44515-authentication-bypass-filter-… (opens in new tab)
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)