CVE-2021-44757: Undefined Security Weakness

Zoho ManageEngine Desktop Central before 10.1.2137.9 and Desktop Central MSP before 10.1.2137.9 allow attackers to bypass authentication, and read sensitive information or upload an arbitrary ZIP archive to the server...

CVE-2020-9367

The MPS Agent in Zoho ManageEngine Desktop Central MSP build MSP build 10.0.486 is vulnerable to DLL Hijacking: dcinventory.exe and dcconfig.exe try to load CSUNSAPI.dll without supplying the complete path. The issue is aggravated because this DLL is missing from the installation, thus making it...

PT-2021-12847

Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine Desktop Central MSP version 10.0.486 Description: The issue is related to DLL Hijacking, where dcinventory.exe and dcconfig.exe attempt to load CSUNSAPI.dll without providing a complete path. This is problematic because the...

CVE-2020-9367: Uncontrolled Search Path Element

The MPS Agent in Zoho ManageEngine Desktop Central MSP build MSP build 10.0.486 is vulnerable to DLL Hijacking: dcinventory.exe and dcconfig.exe try to load CSUNSAPI.dll without supplying the complete path. The issue is aggravated because this DLL is missing from the installation, thus making it...