ZoHo Patches Authentication Bypass in ManageEngine Desktop Central (CVE-2021-44757)

On January 17, ZoHo issued an advisory for CVE-2021-44757, a critical authentication bypass it has patched in its ManageEngine Desktop Central and ManageEngine Desktop Central MSP products. At this time, there is no information stating that CVE-2021-44757 has been exploited in the wild, but given the history of exploitation against ZoHo ManageEngine Desktop Central servers, attackers are likely to adopt this vulnerability in attack chains. 

For more information, please visit our blog.