CVE-2021-22908

A buffer overflow vulnerability exists in Windows File Resource Profiles in 9.X allows a remote authenticated user with privileges to browse SMB shares to execute arbitrary code as the root user. As of version 9.1R3, this permission is not enabled by default.

Affected

Pulse Connect Secure

CVSS v3.1 NVD

8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0 NVD

9.0 HIGHAV:N/AC:L/Au:S/C:C/I:C/A:C

EPSS

69.38% chance of exploitation in the next 30 days, 99th percentile

Published

2021-05-27

Updated

2024-08-03

Exploit collections (1)

• cve-2021-22908helloexp/0day

Security advisories

• https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44800
• https://www.kb.cert.org/vuls/id/667933

References

• CVE Record
• NVD entry