CVE-2021-37761

Zoho ManageEngine ADManager Plus version 7110 and prior is vulnerable to unrestricted file upload, leading to remote code execution

published September 27, 2021

CVSS
—
EPSS
10%
Percentile
95.5
In the wild
Unconfirmed
What it is

⚡ A crafty unrestricted file upload vulnerability lets mischief-makers execute code on your server! 🔥 Think of it like a restaurant accepting any random dish delivered without checking the ingredients — hidden nasties could be lurking inside, waiting to ruin the meal. An attacker could potentially upload malicious files, leading to unauthorized access and control over your system. Imagine a kitchen where anyone can dictate the recipe — that’s how devastating this could be for your data and security!

Put simply

Think of it like a restaurant accepting any random dish delivered without checking the ingredients — hidden nasties could be lurking inside, waiting to ruin the meal. The vulnerability in Zoho ManageEngine ADManager Plus allows attackers to upload files without proper validation, leading to remote code execution. This means they can run arbitrary code on the server, completely bypassing security measures.

What to do

An attacker could potentially upload malicious files, leading to unauthorized access and control over your system. Imagine a kitchen where anyone can dictate the recipe — that’s how devastating this could be for your data and security! Update ADManager Plus to a secure version beyond 7110 and ensure that file upload validations are implemented properly. Regularly review and monitor server logs for any suspicious activities. 🛡️ You've got this! With a quick patch and some vigilance, you can keep your systems secure. 🚀

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.09539 · 95.5th percentile
Published
2021-09-27T16:23Z
EPSS history
Timeline
  • 27 SEP 16:23Z
    Zoho ManageEngine ADManager Plus version 7110 and prior is vulnerable to unrestricted file upload, leading to remote code execution
    cvelistv5