← Database

CVE-2021-42955

HIGH CVSS: 7.3 Published: 2021-11-17 Modified: 2026-06-17

Description

Zoho Remote Access Plus Server Windows Desktop binary fixed in version 10.1.2132 is affected by an unauthorized password reset vulnerability. Because of the designed password reset mechanism, any non-admin Windows user can reset the password of the Remote Access Plus Server Admin account.

Affected Platforms

Microsoft WindowsZohocorp Manageengine Remote Access Plus

Weakness Type

CWE-732

References