VDB
BDU%3A2021-05469
BDU%3A2021-05469
PUBLISHED
CVSS 9 CRITICAL
Уязвимость веб-интерфейса администратора VPN-шлюза корпоративных сетей Pulse Connect Secure, позволяющая нарушителю выполнить произвольный код
Risk Scores
CVSS 2.0
9
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | Pulse Connect Secure / Pulse Policy Secure | 9.1R9 |
| Pulsesecure | Pulse Connect Secure, Pulse Policy Secure, Pulse Secure Desktop Client |
Timeline
- Dec 17, 2020 PoC Published
- Apr 21, 2021 PoC Published
- Aug 25, 2021 PoC Published
- Oct 25, 2021 PoC Published
- Nov 8, 2021 PoC Published
- Nov 16, 2021 CVE Published
- Nov 20, 2021 PoC Published
- Sep 24, 2024 CVE Updated
- Nov 14, 2024 PoC Published
- Dec 24, 2024 PoC Published
- Feb 6, 2025 PoC Published
- Feb 23, 2025 PoC Published
References
- http://packetstormsecurity.com/files/160619/Pulse-Secure-VPN-Remote-Code-Execution.html url
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-8260 url
- https://www.cisa.gov/sites/default/files/csv/known_exploited_vulnerabilities.csv url
- https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44601 advisory