CVE-2021-46165

High

Description

Zoho ManageEngine Desktop Central before 10.0.662, during startup, launches an executable file from the batch files, but this file's path might not be properly defined.

SeverityHigh
CVSS7.8
Exploit probability—
ProductZohocorp Manageengine Desktop Central
PublishedJan 10, 2022
First seenJan 10, 2022

How to fix

Update
  • zohocorp manageengine_desktop_central10.0.662 or later

Affected products

ProductAffected versionsFixed in
zohocorp manageengine_desktop_centralv < 10.0.66210.0.662

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2021-46165 · Zohocorp Manageengine Desktop Central · Dark Radar