CVE-2021-47891 | Unified Remote 3.9.0.2463 contains a remote code execution v… | CVSS 9.8 CRITICAL

Description

Unified Remote 3.9.0.2463 contains a remote code execution vulnerability that allows attackers to send crafted network packets to execute arbitrary commands. Attackers can exploit the service by connecting to port 9512 and sending specially crafted packets to open a command prompt and download and execute malicious payloads.

Metadata

CVE ID: CVE-2021-47891
State: PUBLISHED
Assigner: VulnCheck
Reserved: 2026-01-18 12:35 UTC
Published: 2026-01-23 16:47 UTC
Last updated: 2026-04-07 14:06 UTC
Primary CWE: CWE-306
Missing Authentication for Critical Function
Vendor / Product: Unified Intents AB / Unified Remote
Sources: cve.org · NVD

Severity & Metrics

9.8 CRITICAL CVSS 3.1

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

SSVC — CISA Coordinator

Exploitation: PoC
Automatable: yes
Tech. Impact: total

Affected products (1)

Vendor	Product	Platform	Versions
Unified Intents AB	Unified Remote	—	3.9.0.2463

Weakness (CWE)

CWE	Source	Description
CWE-306	cna	Missing Authentication for Critical Function

CVSS scores (2)

Score	Severity	Version	Source	Vector
9.8	CRITICAL	3.1	cna	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.3	CRITICAL	4.0	cna	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

References (4)

ExploitDB-49587 https://www.exploit-db.com/exploits/49587
Unified Remote Official Homepage https://www.unifiedremote.com/
Unified Remote Download Page https://www.unifiedremote.com/download
VulnCheck Advisory: Unified Remote 3.9.0.2463 - Remote Code Execution https://www.vulncheck.com/advisories/unified-remote-remote-code-execution