CVE-2021-22908
27.05.2021, 12:15
A buffer overflow vulnerability exists in Windows File Resource Profiles in 9.X allows a remote authenticated user with privileges to browse SMB shares to execute arbitrary code as the root user. As of version 9.1R3, this permission is not enabled by default.
| Vendor | Product | Version |
|---|---|---|
| ivanti | connect_secure | 9.0 |
| ivanti | connect_secure | 9.0:r1 |
| ivanti | connect_secure | 9.0:r1.0 |
| ivanti | connect_secure | 9.0:r2 |
| ivanti | connect_secure | 9.0:r2.0 |
| ivanti | connect_secure | 9.0:r2.1 |
| ivanti | connect_secure | 9.0:r3 |
| ivanti | connect_secure | 9.0:r3.0 |
| ivanti | connect_secure | 9.0:r3.1 |
| ivanti | connect_secure | 9.0:r3.2 |
| ivanti | connect_secure | 9.0:r3.3 |
| ivanti | connect_secure | 9.0:r3.5 |
| ivanti | connect_secure | 9.0:r4 |
| ivanti | connect_secure | 9.0:r4.0 |
| ivanti | connect_secure | 9.0:r4.1 |
| ivanti | connect_secure | 9.0:r5.0 |
| ivanti | connect_secure | 9.0:r6.0 |
| ivanti | connect_secure | 9.1 |
| ivanti | connect_secure | 9.1:r1 |
| ivanti | connect_secure | 9.1:r10.0 |
| ivanti | connect_secure | 9.1:r10.2 |
| ivanti | connect_secure | 9.1:r11.0 |
| ivanti | connect_secure | 9.1:r11.1 |
| ivanti | connect_secure | 9.1:r11.3 |
| ivanti | connect_secure | 9.1:r11.4 |
| pulsesecure | pulse_connect_secure | 9.0rx:rx |
𝑥
= Vulnerable software versions