CVE-2021-22893KEV Β· OVERDUECWE-287CWE-416

Ivanti Pulse Connect Secure Use-After-Free Vulnerability

Critical Β· published April 23, 2021

Patch now

Confirmed exploited, and the score agrees

CVSS calls it critical at 10.0. It is confirmed in active exploitation. It sits in the 98.8th percentile for exploit probability.

1634
days past CISA
deadline
CVSS v3.1
10.0
EPSS
47%
Percentile
98.8
In the wild
Confirmed
What it is

🚨 An unauthenticated attacker can execute code remotely on your Pulse Connect Secure gateway! This authentication bypass vulnerability could open the door wide for chaos. πŸ”₯ Think of this like a hotel with a stunning lobby but no front desk personnel to check in guests. Anyone can waltz in and make themselves at home, potentially accessing sensitive areas that they shouldn’t be in. If exploited, this vulnerability could allow an attacker to take control of your system, leading to data breaches, unauthorized access, and even full remote code execution. The ramifications could be absolutely devastating for your organization's security and integrity, as they could manipulate or steal sensitive information.

Put simply

Think of this like a hotel with a stunning lobby but no front desk personnel to check in guests. Anyone can waltz in and make themselves at home, potentially accessing sensitive areas that they shouldn’t be in. CVE-2021-22893 arises from a failure to properly authenticate users through the Windows File Share Browser and Pulse Secure Collaboration features, leaving the door open for attackers to execute arbitrary code on the Pulse Connect Secure gateway.

What to do

If exploited, this vulnerability could allow an attacker to take control of your system, leading to data breaches, unauthorized access, and even full remote code execution. The ramifications could be absolutely devastating for your organization's security and integrity, as they could manipulate or steal sensitive information. Immediate action is crucial: update your Pulse Connect Secure to version 9.1R2 or later to close this vulnerability. Additionally, conduct a thorough review of your security configurations and access controls to ensure no unauthorized access has occurred. πŸ”’ You've got this! With these actions, you can tighten up your defenses and protect your network from any unwelcome guests. πŸ›‘οΈ

The record
Technical detail
CVSS v3.1
10.0 Β· CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.47172 Β· 98.8th percentile
Weaknesses
CWE-287 Β· Improper Authentication; CWE-416 Β· Use After Free
Published
2021-04-23T21:15Z
KEV added
2021-11-03 Β· due 2022-05-03
Affected products (36)
ProductVersionsFixed in
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
References (10)
EPSS history
Timeline
  • 03 NOV 00:00Z
    Added to CISA KEV β€” remediate by May 3
    kev
  • 23 APR 16:29Z
    Pulse Connect Secure 9.0R3/9.1R1 and higher is vulnerable to an authentication bypass vulnerability exposed by the Windows File Share Browser and Pulse Secure…
    cvelistv5