Exploited vulnerability

CVE-2021-44515

TLP:CLEAR

Zoho Desktop Central Authentication Bypass Vulnerability

Zoho Desktop Central contains an authentication bypass vulnerability that could allow an attacker to execute arbitrary code in the Desktop Central MSP server.

Facts

Vendor: Zoho
Product: Desktop Central
CVSS: 9.8
EPSS (probability of exploitation within 30 days): 99.9 %
On CISA's Known Exploited Vulnerabilities list since: 10 December 2021
First known exploitation: 10 December 2021
CISA's deadline for US federal agencies: 24 December 2021
First seen by Risk Letters: 10 December 2021

Members see which Nordic sectors the flaw hits, and what to do about it.

Get the full brief

Data: NVD (public domain), CISA KEV, FIRST EPSS, MITRE ATT&CK, AlienVault OTX. NVD