CVE-2021-41829: High severity ZohoCorp Manageengine Remote Access Plus vulnerability
Published Sep 30, 2021
·Updated
Zoho ManageEngine Remote Access Plus before 10.1.2121.1 relies on the application's build number to calculate a certain encryption key.
Affected Software
1 affected component
ZohoCorp Manageengine Remote Access Plus<10.1.2121.1
Event History
Sep 30, 2021
CVE Published
via MITRE·02:35 AM
Data Sourced
via MITRE·02:35 AM
Description
Data Sourced
via NVD·03:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2021-41829?
CVE-2021-41829 is a vulnerability in Zoho ManageEngine Remote Access Plus before version 10.1.2121.1.
2
What is the severity of CVE-2021-41829?
The severity of CVE-2021-41829 is high with a CVSS score of 7.5.
3
What is affected by CVE-2021-41829?
Zoho ManageEngine Remote Access Plus versions up to and excluding 10.1.2121.1 are affected by CVE-2021-41829.
4
How does CVE-2021-41829 calculate an encryption key?
CVE-2021-41829 relies on the application's build number to calculate a certain encryption key.
5
Is there a fix available for CVE-2021-41829?
Yes, Zoho ManageEngine has released version 10.1.2121.1 which fixes the vulnerability. It is recommended to update to this version.