CVE-2021-47891
Unified Remote 3.9.0.2463 - Remote Code Execution
- State
- Published
- Severity
- 9.3 Critical
- Published
- Jan 23, 2026
- Updated
- Apr 7, 2026
- Reserved
- Jan 18, 2026
Description
Unified Remote 3.9.0.2463 contains a remote code execution vulnerability that allows attackers to send crafted network packets to execute arbitrary commands. Attackers can exploit the service by connecting to port 9512 and sending specially crafted packets to open a command prompt and download and execute malicious payloads.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 9.3 Critical | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N | VulnCheck |
| 3.1 | 9.8 Critical | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | VulnCheck |
Weaknesses
- CWE-306 Missing Authentication for Critical Function
Affected Products
| Product | Versions |
|---|---|
Unified RemoteUnified Intents AB |
|
References
- ExploitDB-49587exploit
- Unified Remote Official Homepageproduct
- Unified Remote Download Pageproduct
- VulnCheck Advisory: Unified Remote 3.9.0.2463 - Remote Code Executionthird-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.