PT-2021-23073 · Zoho · Zoho Manageengine Network Configuration Manager

Háng Dæ°Æ¡Ng TrầN · Published 2021-11-11 · Updated 2023-02-22 · CVE-2021-41080

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine Network Configuration Manager versions prior to 125465

Description The issue is related to SQL Injection in the hardware details search function.

Recommendations For versions prior to 125465, update to a version that includes the fix for this issue.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2021-41080

Affected Products

Zoho Manageengine Network Configuration Manager

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2021-41080 · Security Note
• https://osv.dev/vulnerability/CVE-2021-41080 · Vendor Advisory
• https://manageengine.com/network-configuration-manager/security-updates/cve-2021-41080.html · Vendor Advisory