CVE-2021-42955

Zoho Remote Access Plus Server Windows Desktop binary fixed in version 10.1.2132 is affected by an unauthorized password reset vulnerability

High · published November 17, 2021

CVSS v3.1
7.3
EPSS
0%
Percentile
36.4
In the wild
Unconfirmed
What it is

Zoho Remote Access Plus Server Windows Desktop binary fixed in version 10.1.2132 is affected by an unauthorized password reset vulnerability. Because of the designed password reset mechanism, any non-admin Windows user can reset the password of the Remote Access Plus Server Admin account.

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AC:L/AV:L/A:L/C:N/I:H/PR:L/S:C/UI:N
CVSS v4.0
Not supplied
EPSS
0.00432 · 36.4th percentile
Published
2021-11-17T12:26Z
EPSS history
Timeline
  • 17 NOV 12:26Z
    Zoho Remote Access Plus Server Windows Desktop binary fixed in version 10.1.2132 is affected by an unauthorized password reset vulnerability
    cvelistv5