CWE
287
Advisory Published
Updated

CVE-2021-44675

First published: Mon Dec 20 2021(Updated: )

Zoho ManageEngine ServiceDesk Plus MSP before 10.5 Build 10534 is vulnerable to unauthenticated remote code execution due to a filter bypass in which authentication is not required.

Credit: cve@mitre.org cve@mitre.org

Affected SoftwareAffected VersionHow to fix
Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus<=10.5
Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus=10.5-10500
Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus=10.5-10501
Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus=10.5-10502
Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus=10.5-10503
Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus=10.5-10504
Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus=10.5-10505
Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus=10.5-10506
Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus=10.5-10507
Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus=10.5-10508
Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus=10.5-10509
Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus=10.5-10510
Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus=10.5-10511
Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus=10.5-10512
Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus=10.5-10513
Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus=10.5-10514
Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus=10.5-10515
Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus=10.5-10516
Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus=10.5-10517
Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus=10.5-10518
Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus=10.5-10519
Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus=10.5-10520
Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus=10.5-10521
Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus=10.5-10522
Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus=10.5-10523
Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus=10.5-10524
Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus=10.5-10525
Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus=10.5-10526
Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus=10.5-10527
Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus=10.5-10528
Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus=10.5-10529
Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus=10.5-10530
Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus=10.5-10531
Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus=10.5-10532
Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus=10.5-10533
Zohocorp Manageengine Servicedesk Plus Msp<=10.5
Zohocorp Manageengine Servicedesk Plus Msp=10.5-10500
Zohocorp Manageengine Servicedesk Plus Msp=10.5-10501
Zohocorp Manageengine Servicedesk Plus Msp=10.5-10502
Zohocorp Manageengine Servicedesk Plus Msp=10.5-10503
Zohocorp Manageengine Servicedesk Plus Msp=10.5-10504
Zohocorp Manageengine Servicedesk Plus Msp=10.5-10505
Zohocorp Manageengine Servicedesk Plus Msp=10.5-10506
Zohocorp Manageengine Servicedesk Plus Msp=10.5-10507
Zohocorp Manageengine Servicedesk Plus Msp=10.5-10508
Zohocorp Manageengine Servicedesk Plus Msp=10.5-10509
Zohocorp Manageengine Servicedesk Plus Msp=10.5-10510
Zohocorp Manageengine Servicedesk Plus Msp=10.5-10511
Zohocorp Manageengine Servicedesk Plus Msp=10.5-10512
Zohocorp Manageengine Servicedesk Plus Msp=10.5-10513
Zohocorp Manageengine Servicedesk Plus Msp=10.5-10514
Zohocorp Manageengine Servicedesk Plus Msp=10.5-10515
Zohocorp Manageengine Servicedesk Plus Msp=10.5-10516
Zohocorp Manageengine Servicedesk Plus Msp=10.5-10517
Zohocorp Manageengine Servicedesk Plus Msp=10.5-10518
Zohocorp Manageengine Servicedesk Plus Msp=10.5-10519
Zohocorp Manageengine Servicedesk Plus Msp=10.5-10520
Zohocorp Manageengine Servicedesk Plus Msp=10.5-10521
Zohocorp Manageengine Servicedesk Plus Msp=10.5-10522
Zohocorp Manageengine Servicedesk Plus Msp=10.5-10523
Zohocorp Manageengine Servicedesk Plus Msp=10.5-10524
Zohocorp Manageengine Servicedesk Plus Msp=10.5-10525
Zohocorp Manageengine Servicedesk Plus Msp=10.5-10526
Zohocorp Manageengine Servicedesk Plus Msp=10.5-10527
Zohocorp Manageengine Servicedesk Plus Msp=10.5-10528
Zohocorp Manageengine Servicedesk Plus Msp=10.5-10529
Zohocorp Manageengine Servicedesk Plus Msp=10.5-10530
Zohocorp Manageengine Servicedesk Plus Msp=10.5-10531
Zohocorp Manageengine Servicedesk Plus Msp=10.5-10532
Zohocorp Manageengine Servicedesk Plus Msp=10.5-10533

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Frequently Asked Questions

  • What is the vulnerability ID for this issue?

    The vulnerability ID for this issue is CVE-2021-44675.

  • What is the severity of CVE-2021-44675?

    The severity of CVE-2021-44675 is critical with a CVSS score of 9.8.

  • What software is affected by CVE-2021-44675?

    Zoho ManageEngine ServiceDesk Plus MSP before 10.5 Build 10534 is affected by CVE-2021-44675.

  • Is authentication required for exploitation?

    No, authentication is not required for exploitation of CVE-2021-44675.

  • How do I fix CVE-2021-44675?

    To fix CVE-2021-44675, update Zoho ManageEngine ServiceDesk Plus MSP to version 10.5 Build 10534 or later.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203