Vulnerabilitycritical

At least 4,460 vulnerable Pulse Connect Secure hosts are exposed to the Internet

Security Affairsby @securityaffairsDec 10, 2022 · 16:30 UTC (Dec 10, 2022)2 min read

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2021-22937 CVE-2021-22933 CVE-2021-22934 CVE-2021-22935 CVE-2021-22936 CVE-2021-22938 CVE-2018-5299

Tags: cve-2021-22937 cve-2021-22933 cve-2021-22934 cve-2021-22935 cve-2021-22936 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2018-5299	A stack-based Buffer Overflow Vulnerability exists in the web server in Pulse Secure Pulse Connect Secure (PCS) before 8.3R4 and Pulse Policy Secure (PPS)…	9.8	3%		Jan 16, 2018
CVE-2021-22937 +5 related CVEs CVE-2021-22934 CVE-2021-22935 CVE-2021-22938 CVE-2021-22933 CVE-2021-22936	A vulnerability in Pulse Connect Secure before 9.1R12 could allow an authenticated administrator to perform a file write via a maliciously crafted archive…	7.2 group max	8%		Aug 16, 2021

From the original article

2 min read at securityaffairs.com

Censys researchers warn of more than 4,000 vulnerable Pulse Connect Secure hosts exposed to the Internet. Pulse Connect Secure is a widely-deployed SSL VPN solution for remote and mobile users, for this reason, it is a target of attacks by multiple threat actors.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.