Skip to content
OpenAdvisories
Unscored CVE-2021-22908 EUVD-2021-10037GHSA-37f5-2q74-7wvc

A buffer overflow vulnerability exists in Windows File Resource Profiles in 9.X allows a remote authenticated user with privileges to brows…

Published May 27, 2021 · Updated Aug 3, 2024 · Assigned by hackerone

Description

A buffer overflow vulnerability exists in Windows File Resource Profiles in 9.X allows a remote authenticated user with privileges to browse SMB shares to execute arbitrary code as the root user. As of version 9.1R3, this permission is not enabled by default.

Affected products

VendorProductAffectedFixed
— Pulse Connect Secure Fixed in 9.1R11.5 —

References