ByteOS Network

Vulnerability Details :

CVE-2021-22893

Assigner Org ID-36234546-b8fa-4601-9d6f-f4e334aa8ea1

Published At-23 Apr, 2021 | 16:29

Updated At-30 Jul, 2025 | 01:38

Ivanti Pulse Connect Secure Use-After-Free Vulnerability

Ivanti Pulse Connect Secure contains a use-after-free vulnerability that allow a remote, unauthenticated attacker to execute code via license services.

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

▼Known Exploited Vulnerabilities (KEV)

cisa.gov

Vendor:

Ivanti Software

Product:Pulse Connect Secure

Added At:03 Nov, 2021

Due At:23 Apr, 2021

Ivanti Pulse Connect Secure Use-After-Free Vulnerability

Ivanti Pulse Connect Secure contains a use-after-free vulnerability that allow a remote, unauthenticated attacker to execute code via license services.

Used in Ransomware

Known

CWE

CWE-287

Required Action:

Apply updates per vendor instructions.

Additional Notes:

Reference CISA's ED 21-03 (https://www.cisa.gov/news-events/directives/ed-21-03-mitigate-pulse-connect-secure-product-vulnerabilities) for further guidance and requirements. Note: The due date for addressing this vulnerability aligns with the requirements outlined in ED 21-03. https://nvd.nist.gov/vuln/detail/CVE-2021-22893

▼Common Vulnerabilities and Exposures (CVE)

cve.org

Assigner:hackerone

Assigner Org ID:36234546-b8fa-4601-9d6f-f4e334aa8ea1

Published At:23 Apr, 2021 | 16:29

Updated At:30 Jul, 2025 | 01:38

▼CVE Numbering Authority (CNA)

Pulse Connect Secure 9.0R3/9.1R1 and higher is vulnerable to an authentication bypass vulnerability exposed by the Windows File Share Browser and Pulse Secure Collaboration features of Pulse Connect Secure that can allow an unauthenticated user to perform remote arbitrary code execution on the Pulse Connect Secure gateway. This vulnerability has been exploited in the wild.

Affected Products

Vendor

n/a

Product

Pulse Connect Secure

Versions

Affected

PCS 9.0R3 or above, PCS 9.1R1 and above

Problem Types

Type	CWE ID	Description
CWE	CWE-287	Improper Authentication - Generic (CWE-287)

Type: CWE

CWE ID: CWE-287

Description: Improper Authentication - Generic (CWE-287)

References

Hyperlink	Resource
https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44784/	x_refsource_MISC
https://blog.pulsesecure.net/pulse-connect-secure-security-update/	x_refsource_MISC
https://www.fireeye.com/blog/threat-research/2021/04/suspected-apt-actors-leverage-bypass-techniques-pulse-secure-zero-day.html	x_refsource_MISC
https://kb.cert.org/vuls/id/213092	x_refsource_MISC

Hyperlink: https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44784/

Resource:

x_refsource_MISC

Hyperlink: https://blog.pulsesecure.net/pulse-connect-secure-security-update/

Resource:

x_refsource_MISC

Hyperlink: https://www.fireeye.com/blog/threat-research/2021/04/suspected-apt-actors-leverage-bypass-techniques-pulse-secure-zero-day.html

Resource:

x_refsource_MISC

Hyperlink: https://kb.cert.org/vuls/id/213092

Resource:

x_refsource_MISC

▼Authorized Data Publishers (ADP)

1. CVE Program Container

References

Hyperlink	Resource
https://www.kb.cert.org/vuls/id/213092	N/A
https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44784/	x_refsource_MISC x_transferred
https://blog.pulsesecure.net/pulse-connect-secure-security-update/	x_refsource_MISC x_transferred
https://www.fireeye.com/blog/threat-research/2021/04/suspected-apt-actors-leverage-bypass-techniques-pulse-secure-zero-day.html	x_refsource_MISC x_transferred
https://kb.cert.org/vuls/id/213092	x_refsource_MISC x_transferred

Hyperlink: https://www.kb.cert.org/vuls/id/213092

Resource: N/A

Hyperlink: https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44784/

Resource:

x_refsource_MISC

x_transferred

Hyperlink: https://blog.pulsesecure.net/pulse-connect-secure-security-update/

Resource:

x_refsource_MISC

x_transferred

Hyperlink: https://www.fireeye.com/blog/threat-research/2021/04/suspected-apt-actors-leverage-bypass-techniques-pulse-secure-zero-day.html

Resource:

x_refsource_MISC

x_transferred

Hyperlink: https://kb.cert.org/vuls/id/213092

Resource:

x_refsource_MISC

x_transferred

2. CISA ADP Vulnrichment

Metrics

Version	Base score	Base severity	Vector
3.1	10.0	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Version: 3.1

Base score: 10.0

Base severity: CRITICAL

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Metrics Other Info

kev

dateAdded:

2021-11-03

reference:

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-22893

Timeline

Event	Date
CVE-2021-22893 added to CISA KEV	2021-11-03 00:00:00

Event: CVE-2021-22893 added to CISA KEV

Date: 2021-11-03 00:00:00

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:support@hackerone.com

Published At:23 Apr, 2021 | 17:15

Updated At:21 Mar, 2025 | 19:26

CISA Catalog

Date Added	Due Date	Vulnerability Name	Required Action
2021-11-03	2021-04-23	Ivanti Pulse Connect Secure Use-After-Free Vulnerability	Apply updates per vendor instructions.

Date Added: 2021-11-03

Due Date: 2021-04-23

Vulnerability Name: Ivanti Pulse Connect Secure Use-After-Free Vulnerability

Required Action: Apply updates per vendor instructions.

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	10.0	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Secondary	3.1	10.0	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Primary	2.0	7.5	HIGH	AV:N/AC:L/Au:N/C:P/I:P/A:P

Type: Primary

Version: 3.1

Base score: 10.0

Base severity: CRITICAL

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Type: Secondary

Version: 3.1

Base score: 10.0

Base severity: CRITICAL

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Type: Primary

Version: 2.0

Base score: 7.5

Base severity: HIGH

Vector:

AV:N/AC:L/Au:N/C:P/I:P/A:P

CPE Matches

Ivanti Software

>>connect_secure>>9.0

cpe:2.3:a:ivanti:connect_secure:9.0:-:*:*:*:*:*:*

Ivanti Software

>>connect_secure>>9.0

cpe:2.3:a:ivanti:connect_secure:9.0:r1:*:*:*:*:*:*

Ivanti Software

>>connect_secure>>9.0

cpe:2.3:a:ivanti:connect_secure:9.0:r2:*:*:*:*:*:*

Ivanti Software

>>connect_secure>>9.0

cpe:2.3:a:ivanti:connect_secure:9.0:r2.1:*:*:*:*:*:*

Ivanti Software

>>connect_secure>>9.0

cpe:2.3:a:ivanti:connect_secure:9.0:r3:*:*:*:*:*:*

Ivanti Software

>>connect_secure>>9.0

cpe:2.3:a:ivanti:connect_secure:9.0:r3.1:*:*:*:*:*:*

Ivanti Software

>>connect_secure>>9.0

cpe:2.3:a:ivanti:connect_secure:9.0:r3.2:*:*:*:*:*:*

Ivanti Software

>>connect_secure>>9.0

cpe:2.3:a:ivanti:connect_secure:9.0:r3.3:*:*:*:*:*:*

Ivanti Software

>>connect_secure>>9.0

cpe:2.3:a:ivanti:connect_secure:9.0:r3.5:*:*:*:*:*:*

Ivanti Software

>>connect_secure>>9.0

cpe:2.3:a:ivanti:connect_secure:9.0:r4:*:*:*:*:*:*

Ivanti Software

>>connect_secure>>9.0

cpe:2.3:a:ivanti:connect_secure:9.0:r4.1:*:*:*:*:*:*

Ivanti Software

>>connect_secure>>9.0

cpe:2.3:a:ivanti:connect_secure:9.0:r5.0:*:*:*:*:*:*

Ivanti Software

>>connect_secure>>9.0

cpe:2.3:a:ivanti:connect_secure:9.0:r6.0:*:*:*:*:*:*

Ivanti Software

>>connect_secure>>9.1

cpe:2.3:a:ivanti:connect_secure:9.1:-:*:*:*:*:*:*

Ivanti Software

>>connect_secure>>9.1

cpe:2.3:a:ivanti:connect_secure:9.1:r1:*:*:*:*:*:*

Ivanti Software

>>connect_secure>>9.1

cpe:2.3:a:ivanti:connect_secure:9.1:r10.0:*:*:*:*:*:*

Ivanti Software

>>connect_secure>>9.1

cpe:2.3:a:ivanti:connect_secure:9.1:r10.2:*:*:*:*:*:*

Ivanti Software

>>connect_secure>>9.1

cpe:2.3:a:ivanti:connect_secure:9.1:r11.0:*:*:*:*:*:*

Ivanti Software

>>connect_secure>>9.1

cpe:2.3:a:ivanti:connect_secure:9.1:r11.1:*:*:*:*:*:*

Ivanti Software

>>connect_secure>>9.1

cpe:2.3:a:ivanti:connect_secure:9.1:r11.3:*:*:*:*:*:*

Ivanti Software

>>connect_secure>>9.1

cpe:2.3:a:ivanti:connect_secure:9.1:r2:*:*:*:*:*:*

Ivanti Software

>>connect_secure>>9.1

cpe:2.3:a:ivanti:connect_secure:9.1:r3:*:*:*:*:*:*

Ivanti Software

>>connect_secure>>9.1

cpe:2.3:a:ivanti:connect_secure:9.1:r4:*:*:*:*:*:*

Ivanti Software

>>connect_secure>>9.1

cpe:2.3:a:ivanti:connect_secure:9.1:r4.1:*:*:*:*:*:*

Ivanti Software

>>connect_secure>>9.1

cpe:2.3:a:ivanti:connect_secure:9.1:r4.2:*:*:*:*:*:*

Ivanti Software

>>connect_secure>>9.1

cpe:2.3:a:ivanti:connect_secure:9.1:r4.3:*:*:*:*:*:*

Ivanti Software

>>connect_secure>>9.1

cpe:2.3:a:ivanti:connect_secure:9.1:r5:*:*:*:*:*:*

Ivanti Software

>>connect_secure>>9.1

cpe:2.3:a:ivanti:connect_secure:9.1:r6:*:*:*:*:*:*

Ivanti Software

>>connect_secure>>9.1

cpe:2.3:a:ivanti:connect_secure:9.1:r7:*:*:*:*:*:*

Ivanti Software

>>connect_secure>>9.1

cpe:2.3:a:ivanti:connect_secure:9.1:r8:*:*:*:*:*:*

Ivanti Software

>>connect_secure>>9.1

cpe:2.3:a:ivanti:connect_secure:9.1:r8.1:*:*:*:*:*:*

Ivanti Software

>>connect_secure>>9.1

cpe:2.3:a:ivanti:connect_secure:9.1:r8.2:*:*:*:*:*:*

Ivanti Software

>>connect_secure>>9.1

cpe:2.3:a:ivanti:connect_secure:9.1:r8.4:*:*:*:*:*:*

Ivanti Software

>>connect_secure>>9.1

cpe:2.3:a:ivanti:connect_secure:9.1:r9:*:*:*:*:*:*

Ivanti Software

>>connect_secure>>9.1

cpe:2.3:a:ivanti:connect_secure:9.1:r9.1:*:*:*:*:*:*

Ivanti Software

>>connect_secure>>9.1

cpe:2.3:a:ivanti:connect_secure:9.1:r9.2:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-287	Secondary	support@hackerone.com
CWE-416	Primary	nvd@nist.gov

CWE ID: CWE-287

Type: Secondary

Source: support@hackerone.com

CWE ID: CWE-416

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
https://blog.pulsesecure.net/pulse-connect-secure-security-update/	support@hackerone.com	Vendor Advisory
https://kb.cert.org/vuls/id/213092	support@hackerone.com	Third Party Advisory US Government Resource
https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44784/	support@hackerone.com	Vendor Advisory Broken Link
https://www.fireeye.com/blog/threat-research/2021/04/suspected-apt-actors-leverage-bypass-techniques-pulse-secure-zero-day.html	support@hackerone.com	Third Party Advisory
https://blog.pulsesecure.net/pulse-connect-secure-security-update/	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
https://kb.cert.org/vuls/id/213092	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory US Government Resource
https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44784/	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory Broken Link
https://www.fireeye.com/blog/threat-research/2021/04/suspected-apt-actors-leverage-bypass-techniques-pulse-secure-zero-day.html	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
https://www.kb.cert.org/vuls/id/213092	af854a3a-2127-422b-91ae-364da2661108	US Government Resource

Hyperlink: https://blog.pulsesecure.net/pulse-connect-secure-security-update/

Source: support@hackerone.com

Resource:

Vendor Advisory

Hyperlink: https://kb.cert.org/vuls/id/213092

Source: support@hackerone.com

Resource:

Third Party Advisory

US Government Resource

Hyperlink: https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44784/

Source: support@hackerone.com

Resource:

Vendor Advisory

Broken Link

Hyperlink: https://www.fireeye.com/blog/threat-research/2021/04/suspected-apt-actors-leverage-bypass-techniques-pulse-secure-zero-day.html

Source: support@hackerone.com

Resource:

Third Party Advisory

Hyperlink: https://blog.pulsesecure.net/pulse-connect-secure-security-update/