Exploit / PoCcritical

Attackers are exploiting zero-day in Pulse Secure VPNs to breach orgs (CVE-2021-22893)

Help Net Securityby @zeljkazorzApr 21, 2021 · 00:00 UTC (Apr 21, 2021)3 min read2 · 1 read

Read at helpnetsecurity.com

Analyze CVE-2021-22893 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2021-22893 CVE-2019-11510 CVE-2020-8243 CVE-2020-8260

Tags: cve-2021-22893 cve-2019-11510 cve-2020-8243 cve-2020-8260 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2019-11510	Unauthenticated Arbitrary File Read in Ivanti Pulse Connect Secure VPN	10.0	100%	KEVRansomwarePoC ×2	May 8, 2019 KEV Nov 3, 2021
CVE-2020-8243	Authenticated Arbitrary Code Execution via Template Upload in Ivanti Pulse Connect Secure	7.2	91%	KEV	Sep 30, 2020 KEV Nov 3, 2021
CVE-2020-8260	Authenticated RCE in Ivanti Pulse Connect Secure admin web interface (pre-9.1R9)	7.2	96%	KEVPoC	Oct 28, 2020 KEV Nov 3, 2021
CVE-2021-22893	Use-After-Free RCE in Ivanti Pulse Connect Secure License Services	10.0	47%	KEVRansomware	Apr 23, 2021 KEV Nov 3, 2021

From the original article

3 min read at helpnetsecurity.com

Attackers have been exploiting several old and one zero-day vulnerability (CVE-2021-22893) affecting Pulse Connect Secure (PCS) VPN devices to breach a variety of defense, government, and financial organizations around the world, Mandiant/FireEye has warned on Tuesday .

Help Net Security

By @zeljkazorz · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.