Home

CVE-2021-22934

Description

A vulnerability in Pulse Connect Secure before 9.1R12 could allow an authenticated administrator or compromised Pulse Connect Secure device in a load-balanced configuration to perform a buffer overflow via a malicious crafted web request.

Risk Information

Base Score
7.2
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
4.682

Associated Vulnerability

VulnerabilityOS Platform
Multiple Vulnerabilities are affected in Ivanti Connect Secure 9.1Windows
Multiple Vulnerabilities are affected in Ivanti Connect Secure 9.1.r1.0Windows
Multiple Vulnerabilities are affected in Ivanti Connect Secure 9.1.r2.0Windows
Multiple Vulnerabilities are affected in Ivanti Connect Secure 9.1.r3.0Windows
Multiple Vulnerabilities are affected in Ivanti Connect Secure 9.1.r4.0Windows
Multiple Vulnerabilities are affected in Ivanti Connect Secure 9.1.r5.0Windows
Multiple Vulnerabilities are affected in Ivanti Connect Secure 9.1.r6.0Windows
Multiple Vulnerabilities are affected in Ivanti Connect Secure 9.1.r7.0Windows
Multiple Vulnerabilities are affected in Ivanti Connect Secure 9.1.r8.0Windows
Multiple Vulnerabilities are affected in Ivanti Connect Secure 9.1.r10.0Windows
Multiple Vulnerabilities are affected in Ivanti Connect Secure 9.1.r11.0Windows
Multiple Vulnerabilities are affected in Ivanti Connect Secure 9.1.r9.0Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234