Vulnerability fixed in Zoho ManageEngine Desktop Central

🗓️ 06 Dec 2021 00:00:00Reported by NCSCType

ManageEngine Desktop Central authentication bypass allows code execution; updates fix it, run detection tool, cloud unaffected, restrict access to LAN.

Reporter	Title	Published	Views	Family All 31
ATTACKERKB	CVE-2021-44515	20 Aug 202500:00	–	attackerkb
BDU FSTEC	The vulnerability of the software for the Zoho ManageEngine SupportCenter Plus service lies in its authentication procedures. This vulnerability allows a perpetrator to bypass the authentication process and gain unauthorized access to the device.	17 Dec 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the ManageEngine Desktop Central software for managing workstations via a web interface stems from deficiencies in the authentication process. This allows a perpetrator to bypass the authentication procedures and execute arbitrary code.	20 Dec 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the AgentLogUploadServlet component of the software for managing workstations via the web interface ManageEngine Desktop Central, as well as the remote monitoring and management tools for desktop PCs, servers, laptops, and mobile devices provided by ManageEngine Endpoint Central MSP (previously ManageEngine Desktop Central MSP), allows a malicious individual to circumvent security restrictions and execute arbitrary code.	7 Mar 202300:00	–	bdu_fstec
Circl	CVE-2021-44515	4 Dec 202106:14	–	circl
CISA KEV Catalog	Zoho Desktop Central Authentication Bypass Vulnerability	10 Dec 202100:00	–	cisa_kev
CISA	CISA Adds Thirteen Known Exploited Vulnerabilities to Catalog	10 Dec 202100:00	–	cisa
CISA	Zoho Releases Security Advisory for ManageEngine Desktop Central and Desktop Central MSP	6 Dec 202100:00	–	cisa
CISA	CISA Adds 13 Known Exploited Vulnerabilities to Catalog	10 Dec 202100:00	–	cisa
CNNVD	ZOHO ManageEngine Desktop Central MSP 授权问题漏洞	6 Dec 202100:00	–	cnnvd