Several Zoho ManageEngine products have been exploited

🗓️ 05 Dec 2021 12:31:49Reported by Hive ProType

Zoho ManageEngine products exploited, multiple vulnerabilities discovered, including code execution and authentication bypass, healthcare, financial services targeted

Reporter	Title	Published	Views	Family All 71
0day.today	ManageEngine ServiceDesk Plus Remote Code Execution Exploit	28 Dec 202100:00	–	zdt
GithubExploit	Exploit for Missing Authentication for Critical Function in Zohocorp Manageengine_Servicedesk_Plus	8 Dec 202120:24	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Zohocorp Manageengine_Servicedesk_Plus	29 Sep 202214:07	–	githubexploit
ICS	APT Actors Exploiting CVE-2021-44077 in Zoho ManageEngine ServiceDesk Plus	6 Dec 202112:00	–	ics
ATTACKERKB	CVE-2021-44526	23 Dec 202115:15	–	attackerkb
ATTACKERKB	CVE-2021-44515	20 Aug 202500:00	–	attackerkb
ATTACKERKB	CVE-2021-44077	29 Nov 202100:00	–	attackerkb
BDU FSTEC	The vulnerability of the software for the Zoho ManageEngine SupportCenter Plus service lies in its authentication procedures. This vulnerability allows a perpetrator to bypass the authentication process and gain unauthorized access to the device.	17 Dec 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the ManageEngine Desktop Central software for managing workstations via a web interface stems from deficiencies in the authentication process. This allows a perpetrator to bypass the authentication procedures and execute arbitrary code.	20 Dec 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the configuration of software solutions for Zoho ManageEngine ServiceDesk Plus, Zoho ManageEngine ServiceDesk Plus MSP, and Zoho ManageEngine SupportCenter Plus lies in the absence of authentication procedures, which allow attackers to execute arbitrary code.	7 Feb 202200:00	–	bdu_fstec

05 Dec 2021 12:31Current

0.4Low risk

Vulners AI Score0.4

EPSS0.99867