← Vulnerability feed

Vulnerability record · CVE-2021-42954 · published 17 November 2021

CVE-2021-42954: Zohocorp manageengine remote access plus incorrect permission assignment vulnerability

Zohocorp · Manageengine Remote Access Plus

Zoho Remote Access Plus Server Windows Desktop Binary fixed from 10.1.2121.1 is affected by incorrect access control. The installation directory is vulnerable to weak file permissions by allowing full control for Windows Everyone user group (non-admin or any guest users), thereby allowing privilege escalation, unauthorized password reset, stealing of sensitive data, access to credentials in plaintext, access to registry values, tampering with configuration files, etc.

7.8 CVSS 3.1 High EPSS 0.39% · top 69.3% CWE-732 · Incorrect permission assignment
7.8CVSS 3.1 base score, v2 4.6
0.39%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
2References, 2 tagged exploit
17 Jun 2026Last modified by NVD

Description

Zoho Remote Access Plus Server Windows Desktop Binary fixed from 10.1.2121.1 is affected by incorrect access control. The installation directory is vulnerable to weak file permissions by allowing full control for Windows Everyone user group (non-admin or any guest users), thereby allowing privilege escalation, unauthorized password reset, stealing of sensitive data, access to credentials in plaintext, access to registry values, tampering with configuration files, etc.

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://medium.com/nestedif/vulnerability-disclosure-improper-filesystem-permission-misconfigured-acls-zoho-r-a-p-56e195 ExploitThird Party Advisory
https://medium.com/nestedif/vulnerability-disclosure-improper-filesystem-permission-misconfigured-acls-zoho-r-a-p-56e195 ExploitThird Party Advisory

Track CVE-2021-42954 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2022-47966Zoho ManageEngine on-premise products RCE via SAML SSO and xmlsecMultiple Zoho ManageEngine on-premise products use Apache Santuario xmlsec 1.4.1, whose XSLT features by design leave certain security protections to…KEVEPSS 100%analysed8.8CVE-2019-11361Zohocorp manageengine remote access plus incorrect authorization vulnerabilityZoho ManageEngine Remote Access Plus 10.0.258 does not validate user permissions properly, allowing for privilege escalation and eventually a full ap…EPSS 3.0%8.1CVE-2020-15589Zohocorp manageengine desktop central vulnerabilityA design issue was discovered in GetInternetRequestHandle, InternetSendRequestEx and InternetSendRequestByBitrate in the client side of Zoho ManageEn…EPSS 8.3%7.8CVE-2021-42955Zohocorp manageengine remote access plus incorrect permission assignment vulnerabilityZoho Remote Access Plus Server Windows Desktop binary fixed in version 10.1.2132 is affected by an unauthorized password reset vulnerability. Because…EPSS 0.43%7.5CVE-2021-41829Zohocorp manageengine remote access plus vulnerabilityZoho ManageEngine Remote Access Plus before 10.1.2121.1 relies on the application's build number to calculate a certain encryption key.EPSS 3.2%7.5CVE-2021-41827Zohocorp manageengine remote access plus hard-coded credentials vulnerabilityZoho ManageEngine Remote Access Plus before 10.1.2121.1 has hardcoded credentials for read-only access. The credentials are in the source code that c…EPSS 4.7%7.5CVE-2021-41828Zohocorp manageengine remote access plus hard-coded credentials vulnerabilityZoho ManageEngine Remote Access Plus before 10.1.2121.1 has hardcoded credentials associated with resetPWD.xml.EPSS 4.7%5.5CVE-2023-6105Zohocorp manageengine analytics plus information exposure vulnerabilityAn information disclosure vulnerability exists in multiple ManageEngine products that can result in encryption keys being exposed. A low-privileged O…EPSS 0.69%

Source: NIST National Vulnerability Database (record CVE-2021-42954), CISA KEV, FIRST EPSS (scores of 2026-09-29). This page is refreshed as NVD updates the record.