Zoho · ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus
CVE-2021-44077
Zoho ManageEngine ServiceDesk Plus Remote Code Execution Vulnerability
Nedir
Zoho ManageEngine ServiceDesk Plus before 11306, ServiceDesk Plus MSP before 10530, and SupportCenter Plus before 11014 are vulnerable to unauthenticated remote code execution. This is related to /RestAPI URLs in a servlet, and ImportTechnicians in the Struts configuration.
CISA: Zoho ManageEngine ServiceDesk Plus before 11306, ServiceDesk Plus MSP before 10530, and SupportCenter Plus before 11014 are vulnerable to unauthenticated remote code execution
Ne yapmalı
Apply updates per vendor instructions.
ABD federal kurumları için son tarih: 15 Aralık 2021
- CISA listesine eklenme
- 1 Aralık 2021
- Yayımlanma
- 29 Kasım 2021
- Önem
- Kritik 9,8 CVSS 3.1
- Önümüzdeki 30 günde saldırı olasılığı (EPSS)
- 93% bilinen tüm açıkların en üstteki 0,2% diliminde
- Zayıflık
- CWE-306
- Daha fazla ayrıntı
- NVD · CVE.org · CISA
Tüm kaynaklar (5)
- https://pitstop.manageengine.com/portal/en/community/topic/security-advisory-for-cve-2021-44077-unauthenticat…
- https://pitstop.manageengine.com/portal/en/community/topic/security-advisory-authentication-bypass-vulnerabil…
- https://pitstop.manageengine.com/portal/en/community/topic/security-advisory-for-cve-2021-44077-unauthenticat…
- https://pitstop.manageengine.com/portal/en/community/topic/security-advisory-for-cve-2021-44077-unauthenticat…
- http://packetstormsecurity.com/files/165400/ManageEngine-ServiceDesk-Plus-Remote-Code-Execution.html
Zoho için istismar edilen diğer açıklar
| Eklenme | Açık | Ürün | Önem | Saldırı olasılığı |
|---|---|---|---|---|
| 7 Mar 2023 | ADSelfService Plus Remote Code Execution | ManageEngine | Orta 6,8 | 71% |
| 23 Oca 2023 | Multiple Products Remote Code Execution | ManageEngine | Kritik 9,8 | 99,8% |
| 22 Eyl 2022 | Multiple Products Remote Code Execution | ManageEngine | Kritik 9,8 | 99,9% |
| 10 Ara 2021 | Authentication Bypass | Desktop Central | Kritik 9,8 | 99,9% |
| 1 Ara 2021 | ManageEngine ServiceDesk Authentication Bypass | ManageEngine ServiceDesk Plus (SDP) | Kritik 9,8 | 99,8% |
| 3 Kas 2021 | ServiceDesk Plus (SDP) File Upload | ManageEngine | Yüksek 7,5 | 63% |
| 3 Kas 2021 | Desktop Central File Upload | ManageEngine | Kritik 9,8 | 99,9% |
| 3 Kas 2021 | ADSelfService Plus Authentication Bypass | ManageEngine | Kritik 9,8 | 99% |
Kaynaklar: Known Exploited Vulnerabilities (CISA, kamu malı), CVE records (cve.org) ve EPSS (FIRST). Saldırı olasılığı, birinin önümüzdeki 30 günde açığı istismar etmeye çalışacağına dair EPSS tahminidir.