CVE-2021-41080: SQL Injection
Published Nov 11, 2021
·Updated
Zoho ManageEngine Network Configuration Manager before ??125465 is vulnerable to SQL Injection in a hardware details search.
Other sources
Zoho ManageEngine Network Configuration Manager before 125465 is vulnerable to SQL Injection in a hardware details search.
— MITRE
Affected Software
69 affected components
ZohoCorp Manageengine Network Configuration Manager>=12.4<12.5
ZohoCorp Manageengine Network Configuration Manager=12.3-build123123
ZohoCorp Manageengine Network Configuration Manager=12.3-build123129
ZohoCorp Manageengine Network Configuration Manager=12.3-build123137
ZohoCorp Manageengine Network Configuration Manager=12.3-build123151
ZohoCorp Manageengine Network Configuration Manager=12.3-build123156
ZohoCorp Manageengine Network Configuration Manager=12.3-build123159
ZohoCorp Manageengine Network Configuration Manager=12.3-build123169
ZohoCorp Manageengine Network Configuration Manager=12.3-build123177
ZohoCorp Manageengine Network Configuration Manager=12.3-build123179
ZohoCorp Manageengine Network Configuration Manager=12.3-build123191
ZohoCorp Manageengine Network Configuration Manager=12.3-build123194
ZohoCorp Manageengine Network Configuration Manager=12.3-build123206
ZohoCorp Manageengine Network Configuration Manager=12.3-build123207
ZohoCorp Manageengine Network Configuration Manager=12.3-build123214
ZohoCorp Manageengine Network Configuration Manager=12.3-build123215
ZohoCorp Manageengine Network Configuration Manager=12.3-build123217
ZohoCorp Manageengine Network Configuration Manager=12.3-build123218
ZohoCorp Manageengine Network Configuration Manager=12.3-build123222
ZohoCorp Manageengine Network Configuration Manager=12.3-build123223
ZohoCorp Manageengine Network Configuration Manager=12.3-build123231
ZohoCorp Manageengine Network Configuration Manager=12.3-build123237
ZohoCorp Manageengine Network Configuration Manager=12.3-build123239
ZohoCorp Manageengine Network Configuration Manager=12.3-build123274
ZohoCorp Manageengine Network Configuration Manager=12.3-build123277
ZohoCorp Manageengine Network Configuration Manager=12.3-build123279
ZohoCorp Manageengine Network Configuration Manager=12.3-build123288
ZohoCorp Manageengine Network Configuration Manager=12.3-build123304
ZohoCorp Manageengine Network Configuration Manager=12.3-build123306
ZohoCorp Manageengine Network Configuration Manager=12.3-build123312
ZohoCorp Manageengine Network Configuration Manager=12.3-build123323
ZohoCorp Manageengine Network Configuration Manager=12.3-build123327
ZohoCorp Manageengine Network Configuration Manager=12.5
ZohoCorp Manageengine Network Configuration Manager=12.5-build125000
ZohoCorp Manageengine Network Configuration Manager=12.5-build125108
ZohoCorp Manageengine Network Configuration Manager=12.5-build125112
ZohoCorp Manageengine Network Configuration Manager=12.5-build125115
ZohoCorp Manageengine Network Configuration Manager=12.5-build125116
ZohoCorp Manageengine Network Configuration Manager=12.5-build125120
ZohoCorp Manageengine Network Configuration Manager=12.5-build125121
ZohoCorp Manageengine Network Configuration Manager=12.5-build125125
ZohoCorp Manageengine Network Configuration Manager=12.5-build125129
ZohoCorp Manageengine Network Configuration Manager=12.5-build125136
ZohoCorp Manageengine Network Configuration Manager=12.5-build125142
ZohoCorp Manageengine Network Configuration Manager=12.5-build125149
ZohoCorp Manageengine Network Configuration Manager=12.5-build125180
ZohoCorp Manageengine Network Configuration Manager=12.5-build125195
ZohoCorp Manageengine Network Configuration Manager=12.5-build125199
ZohoCorp Manageengine Network Configuration Manager=12.5-build125212
ZohoCorp Manageengine Network Configuration Manager=12.5-build125213
ZohoCorp Manageengine Network Configuration Manager=12.5-build125216
ZohoCorp Manageengine Network Configuration Manager=12.5-build125228
ZohoCorp Manageengine Network Configuration Manager=12.5-build125232
ZohoCorp Manageengine Network Configuration Manager=12.5-build125233
ZohoCorp Manageengine Network Configuration Manager=12.5-build125234
ZohoCorp Manageengine Network Configuration Manager=12.5-build125323
ZohoCorp Manageengine Network Configuration Manager=12.5-build125325
ZohoCorp Manageengine Network Configuration Manager=12.5-build125327
ZohoCorp Manageengine Network Configuration Manager=12.5-build125329
ZohoCorp Manageengine Network Configuration Manager=12.5-build125343
ZohoCorp Manageengine Network Configuration Manager=12.5-build125345
ZohoCorp Manageengine Network Configuration Manager=12.5-build125358
ZohoCorp Manageengine Network Configuration Manager=12.5-build125362
ZohoCorp Manageengine Network Configuration Manager=12.5-build125363
ZohoCorp Manageengine Network Configuration Manager=12.5-build125378
ZohoCorp Manageengine Network Configuration Manager=12.5-build125392
ZohoCorp Manageengine Network Configuration Manager=12.5-build125399
ZohoCorp Manageengine Network Configuration Manager=12.5-build125417
ZohoCorp Manageengine Network Configuration Manager=12.5-build125445
Event History
Nov 11, 2021
CVE Published
via MITRE·04:26 AM
Data Sourced
via MITRE·04:26 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2021-41080?
CVE-2021-41080 has been classified as a high severity vulnerability due to the potential for SQL Injection attacks.
2
How do I fix CVE-2021-41080?
To fix CVE-2021-41080, upgrade to the latest version of Zoho ManageEngine Network Configuration Manager that addresses this vulnerability.
3
Which versions are affected by CVE-2021-41080?
CVE-2021-41080 impacts Zoho ManageEngine Network Configuration Manager versions prior to 12.5 and specific builds of 12.3.
4
What type of vulnerability is CVE-2021-41080?
CVE-2021-41080 is an SQL Injection vulnerability that affects the hardware details search feature.
5
Can CVE-2021-41080 be exploited remotely?
Yes, CVE-2021-41080 can be exploited remotely if an attacker has access to the software interface.