VYPR
← All advisories
High severity8.8NVD Advisory· Published May 27, 2021· Updated Jun 17, 2026

CVE-2021-22908

CVE-2021-22908

Description

A buffer overflow vulnerability exists in Windows File Resource Profiles in 9.X allows a remote authenticated user with privileges to browse SMB shares to execute arbitrary code as the root user. As of version 9.1R3, this permission is not enabled by default.

Affected products

28
  • Ivanti/Connect Secure25 versions
    cpe:2.3:a:ivanti:connect_secure:9.0:-:*:*:*:*:*:*+ 24 more
    • cpe:2.3:a:ivanti:connect_secure:9.0:-:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.0:r1.0:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.0:r1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.0:r2.0:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.0:r2.1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.0:r2:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.0:r3.0:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.0:r3.1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.0:r3.2:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.0:r3.3:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.0:r3.5:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.0:r3:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.0:r4.0:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.0:r4.1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.0:r4:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.0:r5.0:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.0:r6.0:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:-:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r10.0:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r10.2:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r11.0:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r11.1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r11.3:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r11.4:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r1:*:*:*:*:*:*
  • Pulsesecure/Pulse Connect Secure
    cpe:2.3:a:pulsesecure:pulse_connect_secure:9.0rx:*:*:*:*:*:*:*
  • Windows/Windows File Resource Profilesdescription
  • Pulsesecure/Windows File Resource Profilesllm-create
    Range: <9.1R3

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.