CVE-2021-37925: Command Injection
Published Sep 22, 2021
·Updated
Zoho ManageEngine ADManager Plus version 7110 and prior has a Post-Auth OS command injection vulnerability.
Affected Software
5 affected components
ZohoCorp ManageEngine ADManager Plus<7.1
ZohoCorp ManageEngine ADManager Plus=7.1
ZohoCorp ManageEngine ADManager Plus=7.1-7100
ZohoCorp ManageEngine ADManager Plus=7.1-7101
ZohoCorp ManageEngine ADManager Plus=7.1-7102
Event History
Sep 22, 2021
CVE Published
via MITRE·01:23 PM
Data Sourced
via MITRE·01:23 PM
Description
Data Sourced
via NVD·02:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2021-37925?
CVE-2021-37925 is a vulnerability in Zoho ManageEngine ADManager Plus version 7110 and prior that allows for Post-Auth OS command injection.
2
How severe is CVE-2021-37925?
CVE-2021-37925 has a severity rating of 9.8, which is considered critical.
3
What software versions are affected by CVE-2021-37925?
Zoho ManageEngine ADManager Plus versions 7110 and prior are affected by CVE-2021-37925.
4
How do I fix CVE-2021-37925?
To fix CVE-2021-37925, users should update to version 7.1-7102 or higher of Zoho ManageEngine ADManager Plus.
5
Where can I find more information about CVE-2021-37925?
More information about CVE-2021-37925 can be found on the Zoho ManageEngine website and in the release notes of ADManager Plus version 7.1.1.