CVE-2021-28960

Name of the Vulnerable Software and Affected Versions: ManageEngine Desktop Central versions prior to 10.0.683

Description: The issue arises from improper handling of an input command in on-demand operations, allowing unauthenticated command injection. This can lead to unauthenticated remote code execution during communication with the Notification Server.

Recommendations: For versions prior to 10.0.683, update to build 10.0.683 or later to resolve the issue. As a temporary workaround, consider restricting access to on-demand operations until a patch is applied.