CVE-2021-44757
Critical
Published: 18 January 2022
Published
18 January 2022
Modified
21 November 2024
KEV Added
—
Patch
—
CVSS Score v3.1
9.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
EPSS Score
0.4122
97.5th percentile
Risk Priority
43
60% EPSS · 20% KEV · 20% CVSS
Summary
CVE-2021-44757 is a critical-severity an unspecified weakness vulnerability in Zohocorp Manageengine Desktop Central. Its CVSS base score is 9.1 (Critical).
Operationally, ranked in the top 2.5% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2021-31572
Vulnerability details
Zoho ManageEngine Desktop Central before 10.1.2137.9 and Desktop Central MSP before 10.1.2137.9 allow attackers to bypass authentication, and read sensitive information or upload an arbitrary ZIP archive to the server.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
zohocorp
manageengine desktop central
≤ 10.1.2137.9
zohocorp
manageengine desktop central managed service providers
≤ 10.1.2137.9
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.