CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2021-12-12
Zoho ManageEngine Desktop Central Authentication Bypass and Remote Code Execution Vulnerability Advisory (CVE-2021-44515)
[Affected Scope] Zoho ManageEngine Desktop Central and Desktop Central MSP (Enterprise/MSP builds 10.1.2127.17 and earlier, and 10.1.2128.0 through 10.1.2137.2)
[Impact] Unauthenticated remote attackers can bypass authentication filters to execute arbitrary code with SYSTEM privileges on the server, actively exploited in the wild
[Mitigation] Immediately upgrade to the patched versions (10.1.2127.18 or 10.1.2137.3 or later) depending on your current build branch