CVE-2021-22908
EUVD-2021-1003727.05.2021, 12:15
A buffer overflow vulnerability exists in Windows File Resource Profiles in 9.X allows a remote authenticated user with privileges to browse SMB shares to execute arbitrary code as the root user. As of version 9.1R3, this permission is not enabled by default.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| ivanti | connect_secure | 9.0 |
| ivanti | connect_secure | 9.0:r1 |
| ivanti | connect_secure | 9.0:r1.0 |
| ivanti | connect_secure | 9.0:r2 |
| ivanti | connect_secure | 9.0:r2.0 |
| ivanti | connect_secure | 9.0:r2.1 |
| ivanti | connect_secure | 9.0:r3 |
| ivanti | connect_secure | 9.0:r3.0 |
| ivanti | connect_secure | 9.0:r3.1 |
| ivanti | connect_secure | 9.0:r3.2 |
| ivanti | connect_secure | 9.0:r3.3 |
| ivanti | connect_secure | 9.0:r3.5 |
| ivanti | connect_secure | 9.0:r4 |
| ivanti | connect_secure | 9.0:r4.0 |
| ivanti | connect_secure | 9.0:r4.1 |
| ivanti | connect_secure | 9.0:r5.0 |
| ivanti | connect_secure | 9.0:r6.0 |
| ivanti | connect_secure | 9.1 |
| ivanti | connect_secure | 9.1:r1 |
| ivanti | connect_secure | 9.1:r10.0 |
| ivanti | connect_secure | 9.1:r10.2 |
| ivanti | connect_secure | 9.1:r11.0 |
| ivanti | connect_secure | 9.1:r11.1 |
| ivanti | connect_secure | 9.1:r11.3 |
| ivanti | connect_secure | 9.1:r11.4 |
| pulsesecure | pulse_connect_secure | 9.0rx:rx |
𝑥
= Vulnerable software versions