Vulnerability Description
Zoho ManageEngine Desktop Central before 10.1.2137.9 and Desktop Central MSP before 10.1.2137.9 allow attackers to bypass authentication, and read sensitive information or upload an arbitrary ZIP archive to the server.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Zohocorp | Manageengine Desktop Central | < 10.1.2137.9 |
| Zohocorp | Manageengine Desktop Central Managed Service Providers | < 10.1.2137.9 |
References
- https://pitstop.manageengine.com/portal/en/community/topic/a-critical-security-pVendor Advisory
- https://pitstop.manageengine.com/portal/en/community/topic/a-critical-security-pVendor Advisory
FAQ
What is CVE-2021-44757?
CVE-2021-44757 is a vulnerability with a CVSS score of 9.1 (CRITICAL). Zoho ManageEngine Desktop Central before 10.1.2137.9 and Desktop Central MSP before 10.1.2137.9 allow attackers to bypass authentication, and read sensitive information or upload an arbitrary ZIP arch...
How severe is CVE-2021-44757?
CVE-2021-44757 has been rated CRITICAL with a CVSS base score of 9.1/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2021-44757?
Check the references section above for vendor advisories and patch information. Affected products include: Zohocorp Manageengine Desktop Central, Zohocorp Manageengine Desktop Central Managed Service Providers.