Zoho has released a security advisory to address an authentication bypass vulnerability (CVE-2021-44757) in ManageEngine Desktop Central and Desktop Central MSP. An attacker could exploit this vulnerability to take control of an affected system.
CISA encourages users and administrators to review the Zoho
Vulnerability Notification and the Zoho ManageEngine
Desktop Central and ManageEngine
Desktop Central MSP security advisories and apply the recommended
mitigations immediately.