ZoHo Patches Zero-day in ManageEngine Exploited in the Wild

On December 3, ZoHo issued a security advisory and patches for CVE-2021-44515, an authentication bypass vulnerability in its ManageEngine Desktop Central product that has been exploited in the wild. 

This follows months of reports and alerts regarding active exploitation of two other vulnerabilities in ManageEngine products, CVE-2021-44077 and CVE-2021-40539. The attacks exploiting these vulnerabilities have been linked to advanced persistent threat (APT) groups. At the time of publication, specific information has not been provided about the attacks exploiting CVE-2021-44515.

For more information, please visit our blog.