CVE-2021-41833

Zoho ManageEngine Patch Connect Plus before 90099 is vulnerable to unauthenticated remote code execution.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2021-11-11

Last modified

2024-08-04

Weaknesses

CWE-434

Affected products

• Manageengine Patch Connect Plus (Zohocorp)

References

• https://pitstop.manageengine.com/portal/en/community/topic/unauthenticated-remote-code-execution-vulnerability-solved
• https://www.manageengine.com/sccm-third-party-patch-management/kb/unauthenticated-remote-code-execution.html