CVE-2020-8243 - AskarLabs CVE Database

CVE-2020-8243

Vendor N/A

Product Pulse Connect Secre

Weakness CWE-94 · Code injection

KEV Status Known Exploited

Published September 29, 2020

Last update October 21, 2025

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

A vulnerability in the Pulse Connect Secure < 9.1R8.2 admin web interface could allow an authenticated attacker to upload custom template to perform an arbitrary code execution.

CISA mandated remediation

02CISA Required Action

Apply updates per vendor instructions.

Key dates

03Disclosure timeline

September 29, 2020 CVE published

October 21, 2025 Record updated

External resources

04References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2020-8243 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/94.html CISA KEV Reference https://www.cisa.gov/news-events/directives/ed-21-03-mitigate-… CISA KEV Reference https://nvd.nist.gov/vuln/detail/CVE-2020-8243

Related vulnerabilities

05Related CVE

CVE-2024-21351 Windows SmartScreen Security Feature Bypass Vulnerability CVE-2025-65099 Claude Code vulnerable to command execution prior to startup trust dialog CVE-2025-28993 WordPress Content No Cache plugin <= 0.1.4 - Arbitrary Function Call vulnerability CVE-2026-32573 WordPress Nelio AB Testing plugin <= 8.2.7 - Remote Code Execution (RCE) vulnerability CVE-2025-13658 Industrial Video & Control Longwatch has a Code Injection vulnerability