CVE-2021-41080

Published on: 11/10/2021 12:00:00 AM UTC

Last Modified on: 11/15/2021 10:04:00 PM UTC

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Certain versions of Manageengine Network Configuration Manager from Zohocorp contain the following vulnerability:

Zoho ManageEngine Network Configuration Manager before 125465 is vulnerable to SQL Injection in a hardware details search.

  • CVE-2021-41080 has been assigned by URL Logo [email protected] to track the vulnerability - currently rated as CRITICAL severity.

CVSS3 Score: 9.8 - CRITICAL

Attack
Vector
Attack
Complexity
Privileges
Required
User
Interaction
NETWORK LOW NONE NONE
Scope Confidentiality
Impact
Integrity
Impact
Availability
Impact
UNCHANGED HIGH HIGH HIGH

CVSS2 Score: 7.5 - HIGH

Access
Vector
Access
Complexity
Authentication
NETWORK LOW NONE
Confidentiality
Impact
Integrity
Impact
Availability
Impact
PARTIAL PARTIAL PARTIAL

CVE References

Description Tags Link
Vulnerability fix for CVE-2021-41080 www.manageengine.com
text/html
URL Logo CONFIRM www.manageengine.com/network-configuration-manager/security-updates/cve-2021-41080.html

Known Affected Configurations (CPE V2.3)

Type Vendor Product Version Update Edition Language
ApplicationZohocorpManageengine Network Configuration ManagerAllAllAllAll
ApplicationZohocorpManageengine Network Configuration Manager12.3build123123AllAll
ApplicationZohocorpManageengine Network Configuration Manager12.3build123129AllAll
ApplicationZohocorpManageengine Network Configuration Manager12.3build123137AllAll
ApplicationZohocorpManageengine Network Configuration Manager12.3build123151AllAll
ApplicationZohocorpManageengine Network Configuration Manager12.3build123156AllAll
ApplicationZohocorpManageengine Network Configuration Manager12.3build123159AllAll
ApplicationZohocorpManageengine Network Configuration Manager12.3build123169AllAll
ApplicationZohocorpManageengine Network Configuration Manager12.3build123177AllAll
ApplicationZohocorpManageengine Network Configuration Manager12.3build123179AllAll
ApplicationZohocorpManageengine Network Configuration Manager12.3build123191AllAll
ApplicationZohocorpManageengine Network Configuration Manager12.3build123194AllAll
ApplicationZohocorpManageengine Network Configuration Manager12.3build123206AllAll
ApplicationZohocorpManageengine Network Configuration Manager12.3build123207AllAll
ApplicationZohocorpManageengine Network Configuration Manager12.3build123214AllAll
ApplicationZohocorpManageengine Network Configuration Manager12.3build123215AllAll
ApplicationZohocorpManageengine Network Configuration Manager12.3build123217AllAll
ApplicationZohocorpManageengine Network Configuration Manager12.3build123218AllAll
ApplicationZohocorpManageengine Network Configuration Manager12.3build123222AllAll
ApplicationZohocorpManageengine Network Configuration Manager12.3build123223AllAll
ApplicationZohocorpManageengine Network Configuration Manager12.3build123231AllAll
ApplicationZohocorpManageengine Network Configuration Manager12.3build123237AllAll
ApplicationZohocorpManageengine Network Configuration Manager12.3build123239AllAll
ApplicationZohocorpManageengine Network Configuration Manager12.3build123274AllAll
ApplicationZohocorpManageengine Network Configuration Manager12.3build123277AllAll
ApplicationZohocorpManageengine Network Configuration Manager12.3build123279AllAll
ApplicationZohocorpManageengine Network Configuration Manager12.3build123288AllAll
ApplicationZohocorpManageengine Network Configuration Manager12.3build123304AllAll
ApplicationZohocorpManageengine Network Configuration Manager12.3build123306AllAll
ApplicationZohocorpManageengine Network Configuration Manager12.3build123312AllAll
ApplicationZohocorpManageengine Network Configuration Manager12.3build123323AllAll
ApplicationZohocorpManageengine Network Configuration Manager12.3build123327AllAll
ApplicationZohocorpManageengine Network Configuration Manager12.5-AllAll
ApplicationZohocorpManageengine Network Configuration Manager12.5build125000AllAll
ApplicationZohocorpManageengine Network Configuration Manager12.5build125108AllAll
ApplicationZohocorpManageengine Network Configuration Manager12.5build125112AllAll
ApplicationZohocorpManageengine Network Configuration Manager12.5build125115AllAll
ApplicationZohocorpManageengine Network Configuration Manager12.5build125116AllAll
ApplicationZohocorpManageengine Network Configuration Manager12.5build125120AllAll
ApplicationZohocorpManageengine Network Configuration Manager12.5build125121AllAll
ApplicationZohocorpManageengine Network Configuration Manager12.5build125125AllAll
ApplicationZohocorpManageengine Network Configuration Manager12.5build125129AllAll
ApplicationZohocorpManageengine Network Configuration Manager12.5build125136AllAll
ApplicationZohocorpManageengine Network Configuration Manager12.5build125142AllAll
ApplicationZohocorpManageengine Network Configuration Manager12.5build125149AllAll
ApplicationZohocorpManageengine Network Configuration Manager12.5build125180AllAll
ApplicationZohocorpManageengine Network Configuration Manager12.5build125195AllAll
ApplicationZohocorpManageengine Network Configuration Manager12.5build125199AllAll
ApplicationZohocorpManageengine Network Configuration Manager12.5build125212AllAll
ApplicationZohocorpManageengine Network Configuration Manager12.5build125213AllAll
ApplicationZohocorpManageengine Network Configuration Manager12.5build125216AllAll
ApplicationZohocorpManageengine Network Configuration Manager12.5build125228AllAll
ApplicationZohocorpManageengine Network Configuration Manager12.5build125232AllAll
ApplicationZohocorpManageengine Network Configuration Manager12.5build125233AllAll
ApplicationZohocorpManageengine Network Configuration Manager12.5build125234AllAll
ApplicationZohocorpManageengine Network Configuration Manager12.5build125323AllAll
ApplicationZohocorpManageengine Network Configuration Manager12.5build125325AllAll
ApplicationZohocorpManageengine Network Configuration Manager12.5build125327AllAll
ApplicationZohocorpManageengine Network Configuration Manager12.5build125329AllAll
ApplicationZohocorpManageengine Network Configuration Manager12.5build125343AllAll
ApplicationZohocorpManageengine Network Configuration Manager12.5build125345AllAll
ApplicationZohocorpManageengine Network Configuration Manager12.5build125358AllAll
ApplicationZohocorpManageengine Network Configuration Manager12.5build125362AllAll
ApplicationZohocorpManageengine Network Configuration Manager12.5build125363AllAll
ApplicationZohocorpManageengine Network Configuration Manager12.5build125378AllAll
ApplicationZohocorpManageengine Network Configuration Manager12.5build125392AllAll
ApplicationZohocorpManageengine Network Configuration Manager12.5build125399AllAll
ApplicationZohocorpManageengine Network Configuration Manager12.5build125417AllAll
ApplicationZohocorpManageengine Network Configuration Manager12.5build125445AllAll
  • cpe:2.3:a:zohocorp:manageengine_network_configuration_manager:*:*:*:*:*:*:*:*:
  • cpe:2.3:a:zohocorp:manageengine_network_configuration_manager:12.3:build123123:*:*:*:*:*:*:
  • cpe:2.3:a:zohocorp:manageengine_network_configuration_manager:12.3:build123129:*:*:*:*:*:*:
  • cpe:2.3:a:zohocorp:manageengine_network_configuration_manager:12.3:build123137:*:*:*:*:*:*:
  • cpe:2.3:a:zohocorp:manageengine_network_configuration_manager:12.3:build123151:*:*:*:*:*:*:
  • cpe:2.3:a:zohocorp:manageengine_network_configuration_manager:12.3:build123156:*:*:*:*:*:*:
  • cpe:2.3:a:zohocorp:manageengine_network_configuration_manager:12.3:build123159:*:*:*:*:*:*:
  • cpe:2.3:a:zohocorp:manageengine_network_configuration_manager:12.3:build123169:*:*:*:*:*:*:
  • cpe:2.3:a:zohocorp:manageengine_network_configuration_manager:12.3:build123177:*:*:*:*:*:*:
  • cpe:2.3:a:zohocorp:manageengine_network_configuration_manager:12.3:build123179:*:*:*:*:*:*:
  • cpe:2.3:a:zohocorp:manageengine_network_configuration_manager:12.3:build123191:*:*:*:*:*:*:
  • cpe:2.3:a:zohocorp:manageengine_network_configuration_manager:12.3:build123194:*:*:*:*:*:*:
  • cpe:2.3:a:zohocorp:manageengine_network_configuration_manager:12.3:build123206:*:*:*:*:*:*:
  • cpe:2.3:a:zohocorp:manageengine_network_configuration_manager:12.3:build123207:*:*:*:*:*:*:
  • cpe:2.3:a:zohocorp:manageengine_network_configuration_manager:12.3:build123214:*:*:*:*:*:*:
  • cpe:2.3:a:zohocorp:manageengine_network_configuration_manager:12.3:build123215:*:*:*:*:*:*:
  • cpe:2.3:a:zohocorp:manageengine_network_configuration_manager:12.3:build123217:*:*:*:*:*:*:
  • cpe:2.3:a:zohocorp:manageengine_network_configuration_manager:12.3:build123218:*:*:*:*:*:*:
  • cpe:2.3:a:zohocorp:manageengine_network_configuration_manager:12.3:build123222:*:*:*:*:*:*:
  • cpe:2.3:a:zohocorp:manageengine_network_configuration_manager:12.3:build123223:*:*:*:*:*:*:
  • cpe:2.3:a:zohocorp:manageengine_network_configuration_manager:12.3:build123231:*:*:*:*:*:*:
  • cpe:2.3:a:zohocorp:manageengine_network_configuration_manager:12.3:build123237:*:*:*:*:*:*:
  • cpe:2.3:a:zohocorp:manageengine_network_configuration_manager:12.3:build123239:*:*:*:*:*:*:
  • cpe:2.3:a:zohocorp:manageengine_network_configuration_manager:12.3:build123274:*:*:*:*:*:*:
  • cpe:2.3:a:zohocorp:manageengine_network_configuration_manager:12.3:build123277:*:*:*:*:*:*:
  • cpe:2.3:a:zohocorp:manageengine_network_configuration_manager:12.3:build123279:*:*:*:*:*:*:
  • cpe:2.3:a:zohocorp:manageengine_network_configuration_manager:12.3:build123288:*:*:*:*:*:*:
  • cpe:2.3:a:zohocorp:manageengine_network_configuration_manager:12.3:build123304:*:*:*:*:*:*:
  • cpe:2.3:a:zohocorp:manageengine_network_configuration_manager:12.3:build123306:*:*:*:*:*:*:
  • cpe:2.3:a:zohocorp:manageengine_network_configuration_manager:12.3:build123312:*:*:*:*:*:*:
  • cpe:2.3:a:zohocorp:manageengine_network_configuration_manager:12.3:build123323:*:*:*:*:*:*:
  • cpe:2.3:a:zohocorp:manageengine_network_configuration_manager:12.3:build123327:*:*:*:*:*:*:
  • cpe:2.3:a:zohocorp:manageengine_network_configuration_manager:12.5:-:*:*:*:*:*:*:
  • cpe:2.3:a:zohocorp:manageengine_network_configuration_manager:12.5:build125000:*:*:*:*:*:*:
  • cpe:2.3:a:zohocorp:manageengine_network_configuration_manager:12.5:build125108:*:*:*:*:*:*:
  • cpe:2.3:a:zohocorp:manageengine_network_configuration_manager:12.5:build125112:*:*:*:*:*:*:
  • cpe:2.3:a:zohocorp:manageengine_network_configuration_manager:12.5:build125115:*:*:*:*:*:*:
  • cpe:2.3:a:zohocorp:manageengine_network_configuration_manager:12.5:build125116:*:*:*:*:*:*:
  • cpe:2.3:a:zohocorp:manageengine_network_configuration_manager:12.5:build125120:*:*:*:*:*:*:
  • cpe:2.3:a:zohocorp:manageengine_network_configuration_manager:12.5:build125121:*:*:*:*:*:*:
  • cpe:2.3:a:zohocorp:manageengine_network_configuration_manager:12.5:build125125:*:*:*:*:*:*:
  • cpe:2.3:a:zohocorp:manageengine_network_configuration_manager:12.5:build125129:*:*:*:*:*:*:
  • cpe:2.3:a:zohocorp:manageengine_network_configuration_manager:12.5:build125136:*:*:*:*:*:*:
  • cpe:2.3:a:zohocorp:manageengine_network_configuration_manager:12.5:build125142:*:*:*:*:*:*:
  • cpe:2.3:a:zohocorp:manageengine_network_configuration_manager:12.5:build125149:*:*:*:*:*:*:
  • cpe:2.3:a:zohocorp:manageengine_network_configuration_manager:12.5:build125180:*:*:*:*:*:*:
  • cpe:2.3:a:zohocorp:manageengine_network_configuration_manager:12.5:build125195:*:*:*:*:*:*:
  • cpe:2.3:a:zohocorp:manageengine_network_configuration_manager:12.5:build125199:*:*:*:*:*:*:
  • cpe:2.3:a:zohocorp:manageengine_network_configuration_manager:12.5:build125212:*:*:*:*:*:*:
  • cpe:2.3:a:zohocorp:manageengine_network_configuration_manager:12.5:build125213:*:*:*:*:*:*:
  • cpe:2.3:a:zohocorp:manageengine_network_configuration_manager:12.5:build125216:*:*:*:*:*:*:
  • cpe:2.3:a:zohocorp:manageengine_network_configuration_manager:12.5:build125228:*:*:*:*:*:*:
  • cpe:2.3:a:zohocorp:manageengine_network_configuration_manager:12.5:build125232:*:*:*:*:*:*:
  • cpe:2.3:a:zohocorp:manageengine_network_configuration_manager:12.5:build125233:*:*:*:*:*:*:
  • cpe:2.3:a:zohocorp:manageengine_network_configuration_manager:12.5:build125234:*:*:*:*:*:*:
  • cpe:2.3:a:zohocorp:manageengine_network_configuration_manager:12.5:build125323:*:*:*:*:*:*:
  • cpe:2.3:a:zohocorp:manageengine_network_configuration_manager:12.5:build125325:*:*:*:*:*:*:
  • cpe:2.3:a:zohocorp:manageengine_network_configuration_manager:12.5:build125327:*:*:*:*:*:*:
  • cpe:2.3:a:zohocorp:manageengine_network_configuration_manager:12.5:build125329:*:*:*:*:*:*:
  • cpe:2.3:a:zohocorp:manageengine_network_configuration_manager:12.5:build125343:*:*:*:*:*:*:
  • cpe:2.3:a:zohocorp:manageengine_network_configuration_manager:12.5:build125345:*:*:*:*:*:*:
  • cpe:2.3:a:zohocorp:manageengine_network_configuration_manager:12.5:build125358:*:*:*:*:*:*:
  • cpe:2.3:a:zohocorp:manageengine_network_configuration_manager:12.5:build125362:*:*:*:*:*:*:
  • cpe:2.3:a:zohocorp:manageengine_network_configuration_manager:12.5:build125363:*:*:*:*:*:*:
  • cpe:2.3:a:zohocorp:manageengine_network_configuration_manager:12.5:build125378:*:*:*:*:*:*:
  • cpe:2.3:a:zohocorp:manageengine_network_configuration_manager:12.5:build125392:*:*:*:*:*:*:
  • cpe:2.3:a:zohocorp:manageengine_network_configuration_manager:12.5:build125399:*:*:*:*:*:*:
  • cpe:2.3:a:zohocorp:manageengine_network_configuration_manager:12.5:build125417:*:*:*:*:*:*:
  • cpe:2.3:a:zohocorp:manageengine_network_configuration_manager:12.5:build125445:*:*:*:*:*:*:

Social Mentions

Source Title Posted (UTC)
Twitter Icon @CVEreport CVE-2021-41080 : Zoho ManageEngine Network Configuration Manager before 125465 is vulnerable to SQL Injection in a… twitter.com/i/web/status/1… 2021-11-11 05:06:30
Twitter Icon @Robo_Alerts Potentially Critical CVE Detected! CVE-2021-41080 Description: Zoho ManageEngine Network Configuration Manager befo… twitter.com/i/web/status/1… 2021-11-11 06:00:09
© CVE.report 2022 Twitter Nitter Twitter Viewer |

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

CVE.report and Source URL Uptime Status status.cve.report