Descripción
Zoho Desktop Central contains an authentication bypass vulnerability that could allow an attacker to execute arbitrary code in the Desktop Central MSP server.
Acción recomendada
Aplicar las actualizaciones según las instrucciones del fabricante.
Referencias
- Ficha en NVD (NIST) nvd.nist.gov/vuln/detail/CVE-2021-44515
Otras vulnerabilidades de Zoho en el catálogo
- CVE-2022-28810 Zoho ManageEngine ADSelfService Plus Remote Code Execution Vulnerability Alta 07-03-2023
- CVE-2022-47966 Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability Alta 23-01-2023
- CVE-2022-35405 Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability Alta 22-09-2022
- CVE-2021-44077 Zoho ManageEngine ServiceDesk Plus Remote Code Execution Vulnerability Alta 01-12-2021
- CVE-2021-37415 Zoho ManageEngine ServiceDesk Authentication Bypass Vulnerability Alta 01-12-2021