critical9.8
CVE-2021-41833
Zoho ManageEngine Patch Connect Plus before 90099 is vulnerable to unauthenticated remote code execution.
Impact
Zoho ManageEngine Patch Connect Plus before 90099 is vulnerable to unauthenticated remote code execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zohocorp | Manageengine Patch Connect Plus | before 9.0.0 Version 9.0.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://pitstop.manageengine.com/portal/en/community/topic/unauthenticated-remote-code-execution-vulnerability-solved
- https://www.manageengine.com/sccm-third-party-patch-management/kb/unauthenticated-remote-code-execution.html
- https://pitstop.manageengine.com/portal/en/community/topic/unauthenticated-remote-code-execution-vulnerability-solved
- https://www.manageengine.com/sccm-third-party-patch-management/kb/unauthenticated-remote-code-execution.html