PT-2022-12597 · Zoho · Zoho Manageengine Desktop Central

Tom Ellson · Published 2022-01-09 · Updated 2022-01-14 · CVE-2021-46165

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine Desktop Central versions prior to 10.0.662

Description The issue arises during startup when Zoho ManageEngine Desktop Central launches an executable file from batch files, but the path to this file might not be properly defined.

Recommendations For versions prior to 10.0.662, update to version 10.0.662 or later to resolve the issue.

Fix

Related Identifiers

CVE-2021-46165

Affected Products

Zoho Manageengine Desktop Central

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2021-46165 · Security Note
• https://osv.dev/vulnerability/CVE-2021-46165 · Vendor Advisory
• https://manageengine.com/products/desktop-central/vulnerabilities-in-reports-module.html · Vendor Advisory
• https://t.me/cibsecurity/35163 · Telegram Post
• https://t.me/cvenotify/25145 · Telegram Post