CVE-2021-40177

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
29/08/2021
Last modified:
01/09/2021

Description

Zoho ManageEngine Log360 before Build 5225 allows remote code execution via BCP file overwrite.

Vulnerable products and versions

CPE From Up to
cpe:2.3:a:zohocorp:manageengine_log360:*:*:*:*:*:*:*:* 5.1 (including)
cpe:2.3:a:zohocorp:manageengine_log360:5.2:build5200:*:*:*:*:*:*
cpe:2.3:a:zohocorp:manageengine_log360:5.2:build5201:*:*:*:*:*:*
cpe:2.3:a:zohocorp:manageengine_log360:5.2:build5206:*:*:*:*:*:*
cpe:2.3:a:zohocorp:manageengine_log360:5.2:build5209:*:*:*:*:*:*
cpe:2.3:a:zohocorp:manageengine_log360:5.2:build5210:*:*:*:*:*:*
cpe:2.3:a:zohocorp:manageengine_log360:5.2:build5211:*:*:*:*:*:*
cpe:2.3:a:zohocorp:manageengine_log360:5.2:build5213:*:*:*:*:*:*
cpe:2.3:a:zohocorp:manageengine_log360:5.2:build5214:*:*:*:*:*:*
cpe:2.3:a:zohocorp:manageengine_log360:5.2:build5218:*:*:*:*:*:*
cpe:2.3:a:zohocorp:manageengine_log360:5.2:build5219:*:*:*:*:*:*
cpe:2.3:a:zohocorp:manageengine_log360:5.2:build5220_beta:*:*:*:*:*:*
cpe:2.3:a:zohocorp:manageengine_log360:5.2:build5224:*:*:*:*:*:*


References to Advisories, Solutions, and Tools