Source |
The Hacker News |
Identifiant |
3740526 |
Date de publication |
2021-12-02 21:50:14 (vue: 2021-12-03 06:05:49) |
Titre |
CISA Warns of Actively Exploited Critical Zoho ManageEngine ServiceDesk Vulnerability |
Texte |
The U.S. Federal Bureau of Investigation (FBI) and the Cybersecurity and Infrastructure Security Agency (CISA) are warning of active exploitation of a newly patched flaw in Zoho's ManageEngine ServiceDesk Plus product to deploy web shells and carry out an array of malicious activities.
Tracked as CVE-2021-44077 (CVSS score: 9.8), the issue relates to an unauthenticated, remote code execution |
Notes |
|
Envoyé |
Oui |
Condensat |
2021 44077 active actively activities agency are array as cve bureau carry cisa code critical cvss cybersecurity deploy execution exploitation exploited fbi federal flaw infrastructure investigation issue malicious manageengine newly out patched plus product relates remote score: security servicedesk shells tracked unauthenticated vulnerability warning warns web zoho |
Tags |
Vulnerability
|
Stories |
|
Move |
|