Published
2021-08-16
·
Updated
2024-02-27
·
CVE-2021-22934
6.5
Medium
| Base vector | Vector | AV:N/AC:L/Au:S/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions:
Pulse Connect Secure versions prior to 9.1R12
Description:
A buffer overflow issue exists due to a maliciously crafted web request. This could be exploited by an authenticated administrator or a compromised Pulse Connect Secure device in a load-balanced configuration.
Recommendations:
For versions prior to 9.1R12, update to version 9.1R12 or later to resolve the issue. As a temporary workaround, consider restricting access to the web interface to minimize the risk of exploitation.
Fix
Buffer Overflow