Actively exploited · Published Jul 30, 2020 · Assigned by hackerone

CVE-2020-8218

High 7.2 Exploited

In plain English

A high-severity code injection in Pulse Connect Secure. Attackers are actively exploiting it in the wild (listed by CISA on March 7, 2022). The chance it is exploited in the next 30 days is estimated at 32.2% (higher than 98% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code. Apply updates per vendor instructions.

Severity (CVSS 3.1)7.2High

Exploit odds (30 days)32.2%top 1.7% of all CVEs

Exploited in the wildYesCISA KEV since Mar 7, 2022

Attack tooling1Public PoC

CISA guidance

Apply updates per vendor instructions.

Federal agencies must remediate by Sep 7, 2022.

Official description

A code injection vulnerability exists in Pulse Connect Secure <9.1R8 that allows an attacker to crafted a URI to perform an arbitrary code execution via the admin web interface.

Affected products (as reported)

Vendor	Product	Versions
n/a	Pulse Connect Secure	Fixed in 9.1R8

Weakness: CWE-94 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

References

https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44516 x_refsource_MISC
https://www.gosecure.net/blog/2020/11/13/forget-your-perimeter-part-2-four-vulnerabilities-in-pulse-connect-secure/ x_refsource_MISC
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-8218 government-resource