CVE-2021-22908 - CVE House
Back to Database
Status published High CVE-2021-22908

A buffer overflow vulnerability exists in Windows File Resource Profiles...

Vulnerability Description

A buffer overflow vulnerability exists in Windows File Resource Profiles in 9.X allows a remote authenticated user with privileges to browse SMB shares to execute arbitrary code as the root user. As of version 9.1R3, this permission is not enabled by default.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-22908

Credits & Attribution

No credits recorded in the NVD database.

Affected Vendor

Affected Software

Pulse Connect Secure
Vulnerable Versions:
Fixed in 9.1R11.5

Timeline

Official Publish: May 27th, 2021
Last Modified: August 3rd, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)