Descripción
Zoho ManageEngine ServiceDesk Plus before 11306, ServiceDesk Plus MSP before 10530, and SupportCenter Plus before 11014 are vulnerable to unauthenticated remote code execution
Acción recomendada
Aplicar las actualizaciones según las instrucciones del fabricante.
Referencias
- Ficha en NVD (NIST) nvd.nist.gov/vuln/detail/CVE-2021-44077
Otras vulnerabilidades de Zoho en el catálogo
- CVE-2022-28810 Zoho ManageEngine ADSelfService Plus Remote Code Execution Vulnerability Alta 07-03-2023
- CVE-2022-47966 Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability Alta 23-01-2023
- CVE-2022-35405 Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability Alta 22-09-2022
- CVE-2021-44515 Zoho Desktop Central Authentication Bypass Vulnerability Alta 10-12-2021
- CVE-2021-37415 Zoho ManageEngine ServiceDesk Authentication Bypass Vulnerability Alta 01-12-2021