CVE-2021-44515: Zoho Desktop Central Authentication Bypass Vulnerability
First published: Fri Dec 10 2021(Updated: )
Zoho Desktop Central contains an authentication bypass vulnerability that could allow an attacker to execute arbitrary code in the Desktop Central MSP server.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Zoho Desktop Central | ||
| Zohocorp Manageengine Desktop Central | <10.1.2127.18 | |
| Zohocorp Manageengine Desktop Central | <10.1.2127.18 | |
| Zohocorp Manageengine Desktop Central | >=10.1.2128.0<=10.1.2137.3 | |
| Zohocorp Manageengine Desktop Central | >=10.1.2128.0<10.1.2137.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://pitstop.manageengine.com/portal/en/community/topic/an-authentication-bypass-vulnerability-identified-and-fixed-in-desktop-central-and-desktop-central-msp
- https://www.cisa.gov/uscert/ncas/current-activity/2021/12/10/cisa-adds-thirteen-known-exploited-vulnerabilities-catalog
- https://www.manageengine.com/products/desktop-central/cve-2021-44515-authentication-bypass-filter-configuration.html
Frequently Asked Questions
What is CVE-2021-44515?
CVE-2021-44515 is an authentication bypass vulnerability in Zoho Desktop Central.
How severe is CVE-2021-44515?
CVE-2021-44515 has a severity rating of 9.8, which is critical.
What is the affected software?
Zoho Desktop Central versions 10.1.2127.17 and earlier, as well as versions 10.1.2128.0 through 10.1.2137.2, are affected.
How can I fix CVE-2021-44515?
To fix CVE-2021-44515, users should upgrade their Zoho Desktop Central installations to version 10.1.2127.18 or later.
Where can I find more information about CVE-2021-44515?
You can find more information about CVE-2021-44515 at the following references: [link1](https://pitstop.manageengine.com/portal/en/community/topic/an-authentication-bypass-vulnerability-identified-and-fixed-in-desktop-central-and-desktop-central-msp), [link2](https://www.cisa.gov/uscert/ncas/current-activity/2021/12/10/cisa-adds-thirteen-known-exploited-vulnerabilities-catalog), [link3](https://www.manageengine.com/products/desktop-central/cve-2021-44515-authentication-bypass-filter-configuration.html).
- agent/author
- agent/description
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- agent/references
- agent/remedy
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/title
- agent/type
- exploited/true
- collector/cisa-known-exploited
- source/CISA
- agent/software-canonical-lookup
- collector/nvd-index
- vendor/zoho
- canonical/zoho desktop central
- vendor/zohocorp
- canonical/zohocorp manageengine desktop central
- version/zohocorp manageengine desktop central/10.1.2128.0
- version/zohocorp manageengine desktop central/10.1.2137.3