CVE Vulnerabilities

CVE-2021-40177

Published: Aug 29, 2021 | Modified: Sep 01, 2021
CVSS 3.x
9.8
CRITICAL
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

Zoho ManageEngine Log360 before Build 5225 allows remote code execution via BCP file overwrite.

Affected Software

Name Vendor Start Version End Version
Manageengine_log360 Zohocorp * 5.1 (including)
Manageengine_log360 Zohocorp 5.2-build5200 (including) 5.2-build5200 (including)
Manageengine_log360 Zohocorp 5.2-build5201 (including) 5.2-build5201 (including)
Manageengine_log360 Zohocorp 5.2-build5206 (including) 5.2-build5206 (including)
Manageengine_log360 Zohocorp 5.2-build5209 (including) 5.2-build5209 (including)
Manageengine_log360 Zohocorp 5.2-build5210 (including) 5.2-build5210 (including)
Manageengine_log360 Zohocorp 5.2-build5211 (including) 5.2-build5211 (including)
Manageengine_log360 Zohocorp 5.2-build5213 (including) 5.2-build5213 (including)
Manageengine_log360 Zohocorp 5.2-build5214 (including) 5.2-build5214 (including)
Manageengine_log360 Zohocorp 5.2-build5218 (including) 5.2-build5218 (including)
Manageengine_log360 Zohocorp 5.2-build5219 (including) 5.2-build5219 (including)
Manageengine_log360 Zohocorp 5.2-build5220_beta (including) 5.2-build5220_beta (including)
Manageengine_log360 Zohocorp 5.2-build5224 (including) 5.2-build5224 (including)

References