A code injection vulnerability exists in Pulse Connect Secure <9.1R8 that allows an attacker to crafted a URI to perform an arbitrary code execution via the admin web interface.

Threat-Mapped Scoring

Score: 1.8

Priority: P4 - Informational (Low)

• S9 – Sabotage of System/App

EPSS

Score: 0.91071
Percentile: 0.99618

CVSS Scoring

KEV is present

Mapped CWE(s)

• CWE-94 : Improper Control of Generation of Code ('Code Injection')

All CAPEC(s)

CAPEC(s) with Mapped TTPs

Mapped ATT&CK TTPs

• T1027.006 : HTML Smuggling
  Kill Chain: defense-evasion
• T1027.009 : Embedded Payloads
  Kill Chain: defense-evasion
• T1564.009 : Resource Forking
  Kill Chain: defense-evasion

Malware

APTs Threat Group Associations

Campaigns

Affected Products

• cpe:2.3:a:ivanti:connect_secure:*:*:*:*:*:*:*:*
• cpe:2.3:a:ivanti:connect_secure:9.1:-:*:*:*:*:*:*
• cpe:2.3:a:ivanti:connect_secure:9.1:r1:*:*:*:*:*:*
• cpe:2.3:a:ivanti:connect_secure:9.1:r2:*:*:*:*:*:*
• cpe:2.3:a:ivanti:connect_secure:9.1:r3:*:*:*:*:*:*
• cpe:2.3:a:ivanti:connect_secure:9.1:r4:*:*:*:*:*:*
• cpe:2.3:a:ivanti:connect_secure:9.1:r4.1:*:*:*:*:*:*
• cpe:2.3:a:ivanti:connect_secure:9.1:r4.2:*:*:*:*:*:*
• cpe:2.3:a:ivanti:connect_secure:9.1:r4.3:*:*:*:*:*:*
• cpe:2.3:a:ivanti:connect_secure:9.1:r5:*:*:*:*:*:*
• cpe:2.3:a:ivanti:connect_secure:9.1:r6:*:*:*:*:*:*
• cpe:2.3:a:ivanti:connect_secure:9.1:r7:*:*:*:*:*:*
• cpe:2.3:a:ivanti:policy_secure:9.1:-:*:*:*:*:*:*
• cpe:2.3:a:ivanti:policy_secure:9.1:r1:*:*:*:*:*:*
• cpe:2.3:a:ivanti:policy_secure:9.1:r2:*:*:*:*:*:*
• cpe:2.3:a:ivanti:policy_secure:9.1:r3:*:*:*:*:*:*
• cpe:2.3:a:ivanti:policy_secure:9.1:r3.1:*:*:*:*:*:*
• cpe:2.3:a:ivanti:policy_secure:9.1:r4:*:*:*:*:*:*
• cpe:2.3:a:ivanti:policy_secure:9.1:r4.1:*:*:*:*:*:*
• cpe:2.3:a:ivanti:policy_secure:9.1:r4.2:*:*:*:*:*:*
• cpe:2.3:a:ivanti:policy_secure:9.1:r5:*:*:*:*:*:*
• cpe:2.3:a:ivanti:policy_secure:9.1:r6:*:*:*:*:*:*
• cpe:2.3:a:ivanti:policy_secure:9.1:r7:*:*:*:*:*:*
• cpe:2.3:a:pulsesecure:pulse_policy_secure:*:*:*:*:*:*:*:*

← Back to Home