CVE-2021-22893

CVSS 10 CRITICALEPSS 47.2%● KEVCWE-287

In short

Pulse Connect Secure has a critical flaw that allows attackers to bypass login protections and run malicious code on the system without needing valid credentials. This vulnerability is actively being exploited by hackers.

Technical detail

An authentication bypass in Pulse Connect Secure 9.0R3/9.1R1+ through the Windows File Share Browser and Pulse Secure Collaboration features allows unauthenticated remote attackers to achieve arbitrary code execution on the gateway. The vulnerability requires no prior authentication or user interaction, resulting in complete system compromise.

Summary generated and translated by AI from the official description.

Pulse Connect Secure 9.0R3/9.1R1 and higher is vulnerable to an authentication bypass vulnerability exposed by the Windows File Share Browser and Pulse Secure Collaboration features of Pulse Connect Secure that can allow an unauthenticated user to perform remote arbitrary code execution on the Pulse Connect Secure gateway. This vulnerability has been exploited in the wild.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Affected products

n/a · Pulse Connect Secure

public PoCs found — 3

githubgithub.com/ZephrFish/CVE-2021-22893_HoneyPoC2★ 47 githubgithub.com/orangmuda/CVE-2021-22893★ 7 githubgithub.com/MRLEE123456/CVE-2021-22893★ 0

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://blog.pulsesecure.net/pulse-connect-secure-security-update/https://kb.cert.org/vuls/id/213092 https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44784/https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-22893 https://www.fireeye.com/blog/threat-research/2021/04/suspected-apt-actors-leverage-bypass-techniques-pulse-secure-zero-day.html https://www.kb.cert.org/vuls/id/213092