Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
CVE coverage

CVE-2021-44077

CVSS 9.8 Actively exploited (KEV) 1 detection found
View on NVD →
Zoho ManageEngine ServiceDesk Plus before 11306, ServiceDesk Plus MSP before 10530, and SupportCenter Plus before 11014 are vulnerable to unauthenticated remote code execution. This is related to /RestAPI URLs in a servlet, and ImportTechnicians in the Struts configuration.

Detection rules

Source Rule Status Updated
sigma CVE-2021-44077 POC Default Dropped File test 2022-06-06