Code injection

2021-09-3003:15:00

PRIOn knowledge base

www.prio-n.com

0.026 Low

EPSS

Percentile

90.3%

Zoho ManageEngine Remote Access Plus before 10.1.2121.1 relies on the application’s build number to calculate a certain encryption key.

CPENameOperatorVersion
manageengine_remote_access_pluslt10.1.2121.1

CPE	Name	Operator	Version
	manageengine_remote_access_plus	lt	10.1.2121.1

References

medium.com/nestedif/vulnerability-disclosure-statically-derived-encryption-key-zoho-r-a-p-907088263197

www.manageengine.com/remote-desktop-management/hotfix-readme.html

0.026 Low

EPSS

Percentile

90.3%

Related for PRION:CVE-2021-41829