PT-2021-15265 · Pulse · Pulse Connect Secure

Will Dormann · Published 2021-05-25 · Updated 2024-02-27 · CVE-2021-22908

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Pulse Connect Secure versions 9.X through 9.1R2 Windows File Resource Profiles versions 9.X through 9.1R2

Description A buffer overflow issue exists, allowing a remote authenticated user with privileges to browse SMB shares to execute arbitrary code as the root user. The permission to browse SMB shares is not enabled by default as of version 9.1R3.

Recommendations For Pulse Connect Secure versions 9.X through 9.1R2, update to a version where this permission is not enabled by default, such as 9.1R3 or later. For Windows File Resource Profiles versions 9.X through 9.1R2, consider disabling the SMB share browsing feature until a patch is available.

Fix

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

CVE-2021-22908

Affected Products

Pulse Connect Secure

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2021-22908 · Security Note
• https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44800 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-22908 · Vendor Advisory
• https://t.me/thehackernews/1240 · Telegram Post
• https://t.me/cvenotify/15841 · Telegram Post
• https://kb.cert.org/vuls/id/667933 · Note