CVE-2021-47891 - CVE House

Back to Database

Status published Critical CVE-2021-47891

Unified Remote 3.9.0.2463 - Remote Code Execution

9.3 CVSS

Vulnerability Description

Unified Remote 3.9.0.2463 contains a remote code execution vulnerability that allows attackers to send crafted network packets to execute arbitrary commands. Attackers can exploit the service by connecting to port 9512 and sending specially crafted packets to open a command prompt and download and execute malicious payloads.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-47891

Check My Exposure

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

H4rk3nz0

References

More from Unified Intents AB

View All →

Because the web management interface for Unified Intents' Unified Remote...

Affected Vendor

Unified Intents AB

View all reports →

Affected Software

Unified Remote

Vulnerable Versions:

3.9.0.2463

Timeline

Official Publish: January 23rd, 2026

Last Modified: April 7th, 2026

Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application

T1078 Valid Accounts

T1136 Create Account

T1098 Account Manipulation

Privilege Escalation

T1021 Remote Services

Lateral Movement