CVE-2021-37741: 
Zoho ManageEngine ADManager Plus vulnerability analysis and mitigation

ManageEngine ADManager Plus before version 7111 was discovered to contain pre-authentication Remote Code Execution (RCE) vulnerabilities. The vulnerability was assigned CVE-2021-37741 and was disclosed on September 21, 2021 (NVD, CVE).

The vulnerability affects ManageEngine ADManager Plus installations running versions prior to build 7111. It is characterized as a pre-authentication Remote Code Execution vulnerability, which means an attacker could potentially execute arbitrary code on the affected system without requiring prior authentication (ManageEngine Release Notes).

As a pre-authentication RCE vulnerability, the impact is severe as it potentially allows attackers to execute arbitrary code on the affected system without requiring any authentication. This could lead to complete system compromise, unauthorized access to sensitive data, and potential lateral movement within the network (NVD).

The primary mitigation is to upgrade ManageEngine ADManager Plus to version 7111 or later. ManageEngine has released this version specifically to address the pre-authentication RCE vulnerabilities (ManageEngine Release Notes).