CVE-2021-44077VulnerabilityPublished 12/01/2021Updated 10/24/2026

CVE-2021-44077: Zoho ManageEngine ServiceDesk Plus Remote Code Execution Vulnerability

Affects Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter PlusSource CISA KEV

Severity

High

No CVSS score published yet

Exploitation: Actively exploited – in CISA KEV since 12/01/2021
KEV deadline: 12/15/2021
EPSS: 93.3% chance of exploitation in 30 days – higher than 99% of CVEs

What to do

CISA required action

Apply updates per vendor instructions.

nvd.nist.gov/vuln/detail/CVE-2021-44077 (opens in a new tab)

Affected software

Product	Affected	Fixed in
Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus	Affected <11306 <10530 <11014	Fixed in–

Description

CVE-2021-44077 is a high-severity vulnerability in Zoho ManageEngine ServiceDesk Plus and SupportCenter Plus that allows unauthenticated remote code execution. It affects versions of ServiceDesk Plus before 11306, ServiceDesk Plus MSP before 10530, and SupportCenter Plus before 11014. The vulnerability has been exploited in the wild. No explicit patch information is provided in the input data.

Summary

Zoho ManageEngine ServiceDesk Plus before version 11306, ServiceDesk Plus MSP before 10530, and SupportCenter Plus before 11014 contain an unauthenticated remote code execution vulnerability (CVE-2021-44077). This flaw allows attackers to execute arbitrary code on affected systems without authentication. The vulnerability is classified under CWE-306 (Missing Authentication for Critical Function). It has been observed exploited in the wild, indicating active threat usage. No vendor advisory or patch links were provided in the input data.

Impact

Successful exploitation of this vulnerability allows unauthenticated attackers to execute arbitrary code remotely on affected ManageEngine ServiceDesk Plus and SupportCenter Plus installations. This can lead to full system compromise, data theft, or disruption of service. The vulnerability is actively exploited in the wild, increasing the risk to affected organizations.

Mitigation

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Organizations using affected versions should monitor Zoho's official advisories for patches or updates addressing CVE-2021-44077 and apply them promptly once available. Until a patch is applied, consider restricting network access to the affected services to trusted sources only.

Weaknesses

CWE-306Missing Authentication for Critical Function (opens in a new tab)

What to do

Affected software

Description

AnalysisAI-generated, updated 10/24/2026, 09:55:29 UTC

Weaknesses

References

Related threats