Unrated severityNVD Advisory· Published Jan 18, 2022· Updated Aug 4, 2024

CVE-2021-44757

Description

Zoho ManageEngine Desktop Central before 10.1.2137.9 and Desktop Central MSP before 10.1.2137.9 allow attackers to bypass authentication, and read sensitive information or upload an arbitrary ZIP archive to the server.

Affected products

Zoho/ManageEngine Desktop Centraldescription
Zoho/Desktop Centralllm-fuzzy
Range: <10.1.2137.9
Zohocorp/Manageengine Desktop Centralllm-fuzzy
Range: <10.1.2137.9

Patches

Vulnerability mechanics

References

pitstop.manageengine.com/portal/en/community/topic/a-critical-security-patch-released-in-desktop-central-and-desktop-central-msp-for-cve-2021-44757-17-1-2022mitrex_refsource_MISC

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.019
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000