CVE-2021-22893 | Pulse Connect Secure 9.0R3/9.1R1 and higher is vulnerable to… | CVSS 10.0 CRITICAL

Description

Pulse Connect Secure 9.0R3/9.1R1 and higher is vulnerable to an authentication bypass vulnerability exposed by the Windows File Share Browser and Pulse Secure Collaboration features of Pulse Connect Secure that can allow an unauthenticated user to perform remote arbitrary code execution on the Pulse Connect Secure gateway. This vulnerability has been exploited in the wild.

Metadata

CVE ID: CVE-2021-22893
State: PUBLISHED
Assigner: hackerone
Reserved: 2021-01-06 00:00 UTC
Published: 2021-04-23 16:29 UTC
Last updated: 2025-10-21 23:25 UTC
Primary CWE: CWE-287
Improper Authentication - Generic (CWE-287)
Vendor / Product: n/a / Pulse Connect Secure
Sources: cve.org · NVD

Severity & Metrics

10.0 CRITICAL CVSS 3.1

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

SSVC — CISA Coordinator

Exploitation: ACTIVE
Automatable: yes
Tech. Impact: total

CISA Known Exploited Vulnerability

Vulnerability name: Ivanti Pulse Connect Secure Use-After-Free Vulnerability
Vendor: Ivanti
Product: Pulse Connect Secure
Added to KEV: 2021-11-03
Due date: 2022-05-03
Ransomware: Known use

Required action

Apply updates per vendor instructions.

CISA description

Ivanti Pulse Connect Secure contains a use-after-free vulnerability that allow a remote, unauthenticated attacker to execute code via license services.

Affected products (1)

Vendor	Product	Platform	Versions
n/a	Pulse Connect Secure	—	PCS 9.0R3 or above, PCS 9.1R1 and above

Weakness (CWE)

CWE	Source	Description
CWE-287	cna	Improper Authentication - Generic (CWE-287)

CVSS scores (1)

Score	Severity	Version	Source	Vector
10.0	CRITICAL	3.1	adp	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

References (4)