CVE-2021-22908 - AskarLabs CVE Database

CVE-2021-22908

Vendor N/A

Product Pulse Connect Secure

Weakness CWE-120

Published May 27, 2021

Last update August 3, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

A buffer overflow vulnerability exists in Windows File Resource Profiles in 9.X allows a remote authenticated user with privileges to browse SMB shares to execute arbitrary code as the root user. As of version 9.1R3, this permission is not enabled by default.

Key dates

02Disclosure timeline

May 27, 2021 CVE published

August 3, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2021-22908 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/120.html

Related vulnerabilities

04Related CVE

CVE-2024-37044 QTS, QuTS hero CVE-2023-32968 QTS, QuTS hero CVE-2025-14015 H3C Magic B0 aspForm EditWlanMacList buffer overflow CVE-2018-25280 Infiltrator Network Security Scanner 4.6 Denial of Service CVE-2021-0284 Junos OS: Upon receipt of specific sequences of genuine packets destined to the device the kernel will crash and restart (vmcore)