Threat Source Newsletter (April 29, 2021)
Summary: Pulse Secure disclosed a critical authentication bypass vulnerability, CVE-2021-22893, in Pulse Connect Secure that allows an unauthenticated user to perform remote arbitrary file execution on the gateway, and the company said it has been exploited in the wild. CISA issued an alert noting that networks belonging to multiple government agencies, critical infrastructure entities and private sector organizations have been compromised going back as far as June 2020.
Why it matters: The compromised networks span government agencies, critical infrastructure and private sector organizations, with intrusions dating to June 2020 - roughly ten months of access before the flaw was publicly disclosed.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2021-22893
- Related
- CVE-2021-22893: Ivanti Pulse Connect Secure Use-After-Free Vulnerability Known Exploited Vulnerabilities · Nov 03, 2021Threat Advisory: Pulse Secure Connect Coverage Cyber Risks ·Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026