Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2021-22893

Pulse Connect Secure 9.0R3/9.1R1 and higher is vulnerable to an authentication bypass vulnerability exposed by the Windows File Share Browser and Pulse Secure Collaboration features of Pulse Connect Secure that can allow an unauthenticated user to perform remote arbitrary code execution on the Pulse Connect Secure gateway. This vulnerability has been exploited in the wild.

Published

2021-04-23T17:15:08.127

Last Modified

2025-03-21T19:26:19.180

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 10.0 (CRITICAL)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality Impact: PARTIAL
Integrity Impact: PARTIAL
Availability Impact: PARTIAL

Exploitability Score

10.0

Impact Score

6.4

Weaknesses

Type: Secondary
CWE-287
Type: Primary
CWE-416

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	ivanti	connect_secure	9.0	Yes
Application	ivanti	connect_secure	9.0	Yes
Application	ivanti	connect_secure	9.0	Yes
Application	ivanti	connect_secure	9.0	Yes
Application	ivanti	connect_secure	9.0	Yes
Application	ivanti	connect_secure	9.0	Yes
Application	ivanti	connect_secure	9.0	Yes
Application	ivanti	connect_secure	9.0	Yes
Application	ivanti	connect_secure	9.0	Yes
Application	ivanti	connect_secure	9.0	Yes
Application	ivanti	connect_secure	9.0	Yes
Application	ivanti	connect_secure	9.0	Yes
Application	ivanti	connect_secure	9.0	Yes
Application	ivanti	connect_secure	9.1	Yes
Application	ivanti	connect_secure	9.1	Yes
Application	ivanti	connect_secure	9.1	Yes
Application	ivanti	connect_secure	9.1	Yes
Application	ivanti	connect_secure	9.1	Yes
Application	ivanti	connect_secure	9.1	Yes
Application	ivanti	connect_secure	9.1	Yes
Application	ivanti	connect_secure	9.1	Yes
Application	ivanti	connect_secure	9.1	Yes
Application	ivanti	connect_secure	9.1	Yes
Application	ivanti	connect_secure	9.1	Yes
Application	ivanti	connect_secure	9.1	Yes
Application	ivanti	connect_secure	9.1	Yes
Application	ivanti	connect_secure	9.1	Yes
Application	ivanti	connect_secure	9.1	Yes
Application	ivanti	connect_secure	9.1	Yes
Application	ivanti	connect_secure	9.1	Yes
Application	ivanti	connect_secure	9.1	Yes
Application	ivanti	connect_secure	9.1	Yes
Application	ivanti	connect_secure	9.1	Yes
Application	ivanti	connect_secure	9.1	Yes
Application	ivanti	connect_secure	9.1	Yes
Application	ivanti	connect_secure	9.1	Yes

References

https://blog.pulsesecure.net/pulse-connect-secure-security-update/ Vendor Advisory ([email protected])
https://kb.cert.org/vuls/id/213092 Third Party Advisory, US Government Resource ([email protected])
https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44784/ Vendor Advisory, Broken Link ([email protected])
https://www.fireeye.com/blog/threat-research/2021/04/suspected-apt-actors-leverage-bypass-techniques-pulse-secure-zero-day.html Third Party Advisory ([email protected])
https://blog.pulsesecure.net/pulse-connect-secure-security-update/ Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://kb.cert.org/vuls/id/213092 Third Party Advisory, US Government Resource (af854a3a-2127-422b-91ae-364da2661108)
https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44784/ Vendor Advisory, Broken Link (af854a3a-2127-422b-91ae-364da2661108)
https://www.fireeye.com/blog/threat-research/2021/04/suspected-apt-actors-leverage-bypass-techniques-pulse-secure-zero-day.html Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://www.kb.cert.org/vuls/id/213092 US Government Resource (af854a3a-2127-422b-91ae-364da2661108)