Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
CVE-2021-43319 Details
Description
Zoho ManageEngine Network Configuration Manager before 125488 is vulnerable to command injection due to improper validation in the Ping functionality.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://manageengine.com | CVE | Product |
| https://www.manageengine.com/network-configuration-manager/release-notes.html#125488 | CVE | Release NotesVendor Advisory |
| https://manageengine.com | [email protected] | Product |
| https://www.manageengine.com/network-configuration-manager/release-notes.html#125488 | [email protected] | Release NotesVendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-77 | Improper Neutralization of Special Elements used in a Command ('Command Injection') | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| zohocorp manageengine network configuration manager | 11.0 - 11.0 build11000 12.0 - 12.0 build12000 12.1 - 12.1 build12100 12.2 - 12.2 build12200 12.3 - 12.3 build12300 12.3 build123008 12.3 build123023 12.3 build123035 12.3 build123052 12.3 build123055 12.3 build123057 12.3 build123064 12.3 build123069 12.3 build123070 12.3 build123083 12.3 build123091 12.3 build123105 12.3 build123106 12.3 build123123 12.3 build123129 12.3 build123137 12.3 build123151 12.3 build123156 12.3 build123159 12.3 build123169 12.3 build123177 12.3 build123179 12.3 build123191 12.3 build123194 12.3 build123206 12.3 build123207 12.3 build123214 12.3 build123215 12.3 build123217 12.3 build123218 12.3 build123222 12.3 build123223 12.3 build123231 12.3 build123237 12.3 build123239 12.3 build123274 12.3 build123277 12.3 build123279 12.3 build123288 12.3 build123304 12.3 build123306 12.3 build123312 12.3 build123323 12.3 build123327 12.4 - 12.4 build124000 12.4 build124022 12.4 build124024 12.4 build124026 12.4 build124031 12.4 build124041 12.4 build124043 12.4 build124057 12.4 build124073 12.4 build124079 12.4 build124094 12.4 build124095 12.4 build124098 12.4 build124099 12.4 build124103 12.4 build124104 12.4 build124168 12.4 build124172 12.4 build124176 12.4 build124177 12.4 build124181 12.4 build124186 12.4 build124188 12.4 build124196 12.5 - 12.5 build125000 12.5 build125108 12.5 build125112 12.5 build125115 12.5 build125116 12.5 build125120 12.5 build125121 12.5 build125125 12.5 build125129 12.5 build125136 12.5 build125142 12.5 build125149 12.5 build125180 12.5 build125195 12.5 build125199 12.5 build125212 12.5 build125213 12.5 build125216 12.5 build125228 12.5 build125232 12.5 build125233 12.5 build125234 12.5 build125323 12.5 build125325 12.5 build125327 12.5 build125329 12.5 build125343 12.5 build125345 12.5 build125358 12.5 build125362 12.5 build125363 12.5 build125378 12.5 build125392 12.5 build125399 12.5 build125417 12.5 build125436 12.5 build125445 12.5 build125455 12.5 build125465 12.5 build125469 12.5 build125471 12.5 build125482 12.5 build125483 12.5 build125485 |
CPE
Remediation
| |
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Nov 21, 2024 | CVE Modified | CVE |
| May 14, 2024 | CVE Modified | [email protected] |
| Apr 6, 2022 | Reanalysis | [email protected] |
| Dec 3, 2021 | Initial Analysis | [email protected] |