CVE-2021-44675
First published: Mon Dec 20 2021(Updated: )
Zoho ManageEngine ServiceDesk Plus MSP before 10.5 Build 10534 is vulnerable to unauthenticated remote code execution due to a filter bypass in which authentication is not required.
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| ManageEngine ServiceDesk Plus MSP | <=10.5 | |
| ManageEngine ServiceDesk Plus MSP | =10.5-10500 | |
| ManageEngine ServiceDesk Plus MSP | =10.5-10501 | |
| ManageEngine ServiceDesk Plus MSP | =10.5-10502 | |
| ManageEngine ServiceDesk Plus MSP | =10.5-10503 | |
| ManageEngine ServiceDesk Plus MSP | =10.5-10504 | |
| ManageEngine ServiceDesk Plus MSP | =10.5-10505 | |
| ManageEngine ServiceDesk Plus MSP | =10.5-10506 | |
| ManageEngine ServiceDesk Plus MSP | =10.5-10507 | |
| ManageEngine ServiceDesk Plus MSP | =10.5-10508 | |
| ManageEngine ServiceDesk Plus MSP | =10.5-10509 | |
| ManageEngine ServiceDesk Plus MSP | =10.5-10510 | |
| ManageEngine ServiceDesk Plus MSP | =10.5-10511 | |
| ManageEngine ServiceDesk Plus MSP | =10.5-10512 | |
| ManageEngine ServiceDesk Plus MSP | =10.5-10513 | |
| ManageEngine ServiceDesk Plus MSP | =10.5-10514 | |
| ManageEngine ServiceDesk Plus MSP | =10.5-10515 | |
| ManageEngine ServiceDesk Plus MSP | =10.5-10516 | |
| ManageEngine ServiceDesk Plus MSP | =10.5-10517 | |
| ManageEngine ServiceDesk Plus MSP | =10.5-10518 | |
| ManageEngine ServiceDesk Plus MSP | =10.5-10519 | |
| ManageEngine ServiceDesk Plus MSP | =10.5-10520 | |
| ManageEngine ServiceDesk Plus MSP | =10.5-10521 | |
| ManageEngine ServiceDesk Plus MSP | =10.5-10522 | |
| ManageEngine ServiceDesk Plus MSP | =10.5-10523 | |
| ManageEngine ServiceDesk Plus MSP | =10.5-10524 | |
| ManageEngine ServiceDesk Plus MSP | =10.5-10525 | |
| ManageEngine ServiceDesk Plus MSP | =10.5-10526 | |
| ManageEngine ServiceDesk Plus MSP | =10.5-10527 | |
| ManageEngine ServiceDesk Plus MSP | =10.5-10528 | |
| ManageEngine ServiceDesk Plus MSP | =10.5-10529 | |
| ManageEngine ServiceDesk Plus MSP | =10.5-10530 | |
| ManageEngine ServiceDesk Plus MSP | =10.5-10531 | |
| ManageEngine ServiceDesk Plus MSP | =10.5-10532 | |
| ManageEngine ServiceDesk Plus MSP | =10.5-10533 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2021-44675.
What is the severity of CVE-2021-44675?
The severity of CVE-2021-44675 is critical with a CVSS score of 9.8.
What software is affected by CVE-2021-44675?
Zoho ManageEngine ServiceDesk Plus MSP before 10.5 Build 10534 is affected by CVE-2021-44675.
Is authentication required for exploitation?
No, authentication is not required for exploitation of CVE-2021-44675.
How do I fix CVE-2021-44675?
To fix CVE-2021-44675, update Zoho ManageEngine ServiceDesk Plus MSP to version 10.5 Build 10534 or later.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/weakness
- agent/references
- agent/first-publish-date
- agent/description
- agent/last-modified-date
- agent/author
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/zohocorp
- canonical/manageengine servicedesk plus msp
- version/manageengine servicedesk plus msp/10.5
- version/manageengine servicedesk plus msp/10.5-10500
- version/manageengine servicedesk plus msp/10.5-10501
- version/manageengine servicedesk plus msp/10.5-10502
- version/manageengine servicedesk plus msp/10.5-10503
- version/manageengine servicedesk plus msp/10.5-10504
- version/manageengine servicedesk plus msp/10.5-10505
- version/manageengine servicedesk plus msp/10.5-10506
- version/manageengine servicedesk plus msp/10.5-10507
- version/manageengine servicedesk plus msp/10.5-10508
- version/manageengine servicedesk plus msp/10.5-10509
- version/manageengine servicedesk plus msp/10.5-10510
- version/manageengine servicedesk plus msp/10.5-10511
- version/manageengine servicedesk plus msp/10.5-10512
- version/manageengine servicedesk plus msp/10.5-10513
- version/manageengine servicedesk plus msp/10.5-10514
- version/manageengine servicedesk plus msp/10.5-10515
- version/manageengine servicedesk plus msp/10.5-10516
- version/manageengine servicedesk plus msp/10.5-10517
- version/manageengine servicedesk plus msp/10.5-10518
- version/manageengine servicedesk plus msp/10.5-10519
- version/manageengine servicedesk plus msp/10.5-10520
- version/manageengine servicedesk plus msp/10.5-10521
- version/manageengine servicedesk plus msp/10.5-10522
- version/manageengine servicedesk plus msp/10.5-10523
- version/manageengine servicedesk plus msp/10.5-10524
- version/manageengine servicedesk plus msp/10.5-10525
- version/manageengine servicedesk plus msp/10.5-10526
- version/manageengine servicedesk plus msp/10.5-10527
- version/manageengine servicedesk plus msp/10.5-10528
- version/manageengine servicedesk plus msp/10.5-10529
- version/manageengine servicedesk plus msp/10.5-10530
- version/manageengine servicedesk plus msp/10.5-10531
- version/manageengine servicedesk plus msp/10.5-10532
- version/manageengine servicedesk plus msp/10.5-10533