PT-2021-19972 · Zoho · Zoho Manageengine Opmanager

Published 2021-04-22 · Updated 2025-10-23 · CVE-2021-3287

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine OpManager versions prior to 12.5.329

Description The issue allows unauthenticated Remote Code Execution due to a general bypass in the deserialization class.

Recommendations For versions prior to 12.5.329, update to version 12.5.329 or later to resolve the issue.

Exploit

Fix

RCE

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

CVE-2021-3287

Affected Products

Zoho Manageengine Opmanager

References · 13

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/opmanager_sumpdu_deserialization.rb · Exploit
• 🔥 http://packetstormsecurity.com/files/164231/ManageEngine-OpManager-SumPDU-Java-Deserialization.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-3287 · Security Note
• https://osv.dev/vulnerability/CVE-2021-3287 · Vendor Advisory
• https://manageengine.com/network-monitoring/help/read-me-complete.html#125329 · Vendor Advisory
• https://twitter.com/transilienceai/status/1938088001000628277 · Twitter Post
• https://twitter.com/transilienceai/status/1938088004494503972 · Twitter Post
• https://t.me/cvenotify/13548 · Telegram Post
• https://twitter.com/pdnuclei/status/1938054663305109664 · Twitter Post
• https://twitter.com/transilienceai/status/1938087999901753442 · Twitter Post
• https://twitter.com/transilienceai/status/1938087998723178931 · Twitter Post
• https://twitter.com/transilienceai/status/1938087996416311738 · Twitter Post
• https://twitter.com/pdnuclei_bot/status/1981390189458313687 · Twitter Post