Back to CVE Browser

CVE-2021-44515

Known Exploited (CISA KEV)CRITICAL

9.8

CVSS Severity Score

EPSS Score46.6140%

EPSS Percentile93.55th

PublishedDec 12, 2021

Last ModifiedOct 31, 2025

Vulnerability Description

Zoho ManageEngine Desktop Central is vulnerable to authentication bypass, leading to remote code execution on the server, as exploited in the wild in December 2021. For Enterprise builds 10.1.2127.17 and earlier, upgrade to 10.1.2127.18. For Enterprise builds 10.1.2128.0 through 10.1.2137.2, upgrade to 10.1.2137.3. For MSP builds 10.1.2127.17 and earlier, upgrade to 10.1.2127.18. For MSP builds 10.1.2128.0 through 10.1.2137.2, upgrade to 10.1.2137.3.

Affected Platforms (CPE)

📦

Zohocorp

Manageengine Desktop Central

< 10.1.2127.18

📦

Zohocorp

Manageengine Desktop Central

< 10.1.2127.18

📦

Zohocorp

Manageengine Desktop Central

>= 10.1.2128.0 and < 10.1.2137.3

📦

Zohocorp

Manageengine Desktop Central

>= 10.1.2128.0 and < 10.1.2137.3

References & Advisories

🔗 https://pitstop.manageengine.com/portal/en/community/topic/an-authentication-bypass-vulnerability-identified-and-fixed-in-desktop-central-and-desktop-central-msp

🔗 https://www.cisa.gov/uscert/ncas/current-activity/2021/12/10/cisa-adds-thirteen-known-exploited-vulnerabilities-catalog

🔗 https://www.manageengine.com/products/desktop-central/cve-2021-44515-authentication-bypass-filter-configuration.html

🔗 https://pitstop.manageengine.com/portal/en/community/topic/an-authentication-bypass-vulnerability-identified-and-fixed-in-desktop-central-and-desktop-central-msp

🔗 https://www.cisa.gov/uscert/ncas/current-activity/2021/12/10/cisa-adds-thirteen-known-exploited-vulnerabilities-catalog

🔗 https://www.manageengine.com/products/desktop-central/cve-2021-44515-authentication-bypass-filter-configuration.html

🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-44515

Related Vulnerabilities

CVE-2017-721310.0

Zoho ManageEngine Desktop Central before build 100082 allows remote attackers to obtain control over all connected active desktops...

CVE-2014-937110.0

The NativeAppServlet in ManageEngine Desktop Central MSP before 90075 allows remote attackers to execute arbitrary code via a craf...

CVE-2020-85409.8

An XML external entity (XXE) vulnerability in Zoho ManageEngine Desktop Central before the 07-Mar-2020 update allows remote unauth...

CVE-2020-101899.8

Zoho ManageEngine Desktop Central before 10.0.474 allows remote code execution because of deserialization of untrusted data in get...