CVE-2021-22893

Pulse Connect Secure

Published 23 Apr 2021 · updated 12 Aug 2026 · Analyzed

10.0 Critical · CVSS 3.1, NVD

Exploited in the wild

CISA added this to its Known Exploited Vulnerabilities catalog on 3 Nov 2021, with a remediation deadline of 3 May 2022 for US federal agencies. It has been used in ransomware campaigns.

Required action: Apply updates per vendor instructions.

Description

Pulse Connect Secure 9.0R3/9.1R1 and higher is vulnerable to an authentication bypass vulnerability exposed by the Windows File Share Browser and Pulse Secure Collaboration features of Pulse Connect Secure that can allow an unauthenticated user to perform remote arbitrary code execution on the Pulse Connect Secure gateway. This vulnerability has been exploited in the wild.

References

blog.pulsesecure.net/pulse-connect-secure-security-update/ · Vendor Advisory
kb.cert.org/vuls/id/213092 · Third Party Advisory, US Government Resource
kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44784/ · Broken Link, Vendor Advisory
www.fireeye.com/blog/threat-research/2021/04/suspected-apt-actors-leverage-bypass-techniques-pulse-secure-zero-day.html · Third Party Advisory
www.kb.cert.org/vuls/id/213092 · US Government Resource
www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-22893 · US Government Resource