CyberSec.Space Logo
Back to CVE Browser

CVE-2021-44675

CRITICAL
9.8
CVSS Severity Score
EPSS Score0.0100%
EPSS Percentile17.82th
PublishedDec 20, 2021
Last ModifiedNov 21, 2024

Vulnerability Description

Zoho ManageEngine ServiceDesk Plus MSP before 10.5 Build 10534 is vulnerable to unauthenticated remote code execution due to a filter bypass in which authentication is not required.

Affected Platforms (CPE)

📦
Zohocorp

Manageengine Servicedesk Plus Msp

<= 10.5
📦
Zohocorp

Manageengine Servicedesk Plus Msp

= 10.5
📦
Zohocorp

Manageengine Servicedesk Plus Msp

= 10.5
📦
Zohocorp

Manageengine Servicedesk Plus Msp

= 10.5
📦
Zohocorp

Manageengine Servicedesk Plus Msp

= 10.5
📦
Zohocorp

Manageengine Servicedesk Plus Msp

= 10.5
📦
Zohocorp

Manageengine Servicedesk Plus Msp

= 10.5
📦
Zohocorp

Manageengine Servicedesk Plus Msp

= 10.5
📦
Zohocorp

Manageengine Servicedesk Plus Msp

= 10.5
📦
Zohocorp

Manageengine Servicedesk Plus Msp

= 10.5
📦
Zohocorp

Manageengine Servicedesk Plus Msp

= 10.5
📦
Zohocorp

Manageengine Servicedesk Plus Msp

= 10.5
📦
Zohocorp

Manageengine Servicedesk Plus Msp

= 10.5
📦
Zohocorp

Manageengine Servicedesk Plus Msp

= 10.5
📦
Zohocorp

Manageengine Servicedesk Plus Msp

= 10.5
📦
Zohocorp

Manageengine Servicedesk Plus Msp

= 10.5
📦
Zohocorp

Manageengine Servicedesk Plus Msp

= 10.5
📦
Zohocorp

Manageengine Servicedesk Plus Msp

= 10.5
📦
Zohocorp

Manageengine Servicedesk Plus Msp

= 10.5
📦
Zohocorp

Manageengine Servicedesk Plus Msp

= 10.5
📦
Zohocorp

Manageengine Servicedesk Plus Msp

= 10.5
📦
Zohocorp

Manageengine Servicedesk Plus Msp

= 10.5
📦
Zohocorp

Manageengine Servicedesk Plus Msp

= 10.5
📦
Zohocorp

Manageengine Servicedesk Plus Msp

= 10.5
📦
Zohocorp

Manageengine Servicedesk Plus Msp

= 10.5
📦
Zohocorp

Manageengine Servicedesk Plus Msp

= 10.5
📦
Zohocorp

Manageengine Servicedesk Plus Msp

= 10.5
📦
Zohocorp

Manageengine Servicedesk Plus Msp

= 10.5
📦
Zohocorp

Manageengine Servicedesk Plus Msp

= 10.5
📦
Zohocorp

Manageengine Servicedesk Plus Msp

= 10.5
📦
Zohocorp

Manageengine Servicedesk Plus Msp

= 10.5
📦
Zohocorp

Manageengine Servicedesk Plus Msp

= 10.5
📦
Zohocorp

Manageengine Servicedesk Plus Msp

= 10.5
📦
Zohocorp

Manageengine Servicedesk Plus Msp

= 10.5
📦
Zohocorp

Manageengine Servicedesk Plus Msp

= 10.5

References & Advisories

🔗 https://pitstop.manageengine.com/portal/en/community/topic/security-advisory-authentication-bypass-vulnerabilities-in-servicedesk-plus-msp-that-could-lead-to-remote-code-execution
🔗 https://pitstop.manageengine.com/portal/en/community/topic/security-advisory-authentication-bypass-vulnerabilities-in-servicedesk-plus-msp-that-could-lead-to-remote-code-execution

Related Vulnerabilities

CVE-2021-315319.8

Zoho ManageEngine ServiceDesk Plus MSP before 10521 is vulnerable to Server-Side Request Forgery (SSRF).

CVE-2021-440779.8

Zoho ManageEngine ServiceDesk Plus before 11306, ServiceDesk Plus MSP before 10530, and SupportCenter Plus before 11014 are vulner...

CVE-2021-311607.5

Zoho ManageEngine ServiceDesk Plus MSP before 10521 allows an attacker to access internal data.

CVE-2021-315307.5

Zoho ManageEngine ServiceDesk Plus MSP before 10522 is vulnerable to Information Disclosure.