CVE-2021-22908

State: Published
Severity: Not scored
Published: May 27, 2021
Updated: Aug 3, 2024
Reserved: Jan 6, 2021

Description

A buffer overflow vulnerability exists in Windows File Resource Profiles in 9.X allows a remote authenticated user with privileges to browse SMB shares to execute arbitrary code as the root user. As of version 9.1R3, this permission is not enabled by default.

Scores

The record has no CVSS score.

Weaknesses

CWE-120 Classic Buffer Overflow (CWE-120)

Affected Products

Product	Versions
Pulse Connect Securen/a	Fixed in 9.1R11.5Affected

References

https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44800/
https://www.kb.cert.org/vuls/id/667933

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.