Fixed Intel

CISA Known Exploited Vulnerability

This vulnerability is actively exploited in the wild and listed in the CISA Known Exploited Vulnerabilities catalog.

Remediation Deadline: May 3, 2022

CVE-2019-11510

High
CVSS 10EPSS 94.5%CISA KEVPoC AvailableRansomware
Ivanti/Pulse Connect Secure

Description

Ivanti Pulse Connect Secure contains an arbitrary file read vulnerability that allows an unauthenticated remote attacker with network access via HTTPS to send a specially crafted URI.

CVSS Score

10/ 10
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

EPSS — Exploit Probability

94.5%

Higher than 100.0% of all CVEs

Weakness Classification (CWE)

CWE-22Path TraversalMITRE

Known Exploits

POC
http://packetstormsecurity.com/files/154176/Pulse-Secure-SSL-VPN-8.1R15.1-8.2-8.3-9.0-Arbitrary-File-Disclosure.htmlExploithttp://packetstormsecurity.com/files/154231/Pulse-Secure-SSL-VPN-File-Disclosure-NSE.htmlThird Party Advisoryhttp://www.securityfocus.com/bid/108073Broken Linkhttps://badpackets.net/over-14500-pulse-secure-vpn-endpoints-vulnerable-to-cve-2019-11510/Broken Linkhttps://devco.re/blog/2019/09/02/attacking-ssl-vpn-part-3-the-golden-Pulse-Secure-ssl-vpn-rce-chain-with-Twitter-as-case-study/Exploithttps://i.blackhat.com/USA-19/Wednesday/us-19-Tsai-Infiltrating-Corporate-Intranet-Like-NSA.pdfThird Party Advisoryhttps://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0010Third Party Advisoryhttps://www.kb.cert.org/vuls/id/927237Third Party Advisoryhttp://packetstormsecurity.com/files/154176/Pulse-Secure-SSL-VPN-8.1R15.1-8.2-8.3-9.0-Arbitrary-File-Disclosure.htmlExploithttp://packetstormsecurity.com/files/154231/Pulse-Secure-SSL-VPN-File-Disclosure-NSE.htmlThird Party Advisoryhttp://www.securityfocus.com/bid/108073Broken Linkhttps://badpackets.net/over-14500-pulse-secure-vpn-endpoints-vulnerable-to-cve-2019-11510/Broken Linkhttps://devco.re/blog/2019/09/02/attacking-ssl-vpn-part-3-the-golden-Pulse-Secure-ssl-vpn-rce-chain-with-Twitter-as-case-study/Exploithttps://i.blackhat.com/USA-19/Wednesday/us-19-Tsai-Infiltrating-Corporate-Intranet-Like-NSA.pdfThird Party Advisoryhttps://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0010Third Party Advisoryhttps://www.kb.cert.org/vuls/id/927237Third Party Advisory

Required Action

Reference CISA's ED 21-03 (https://www.cisa.gov/news-events/directives/ed-21-03-mitigate-pulse-connect-secure-product-vulnerabilities) for further guidance and requirements. Note: The due date for addressing this vulnerability aligns with the requirements outlined in ED 21-03. https://nvd.nist.gov/vuln/detail/CVE-2019-11510

Risk Assessment

CRITICAL
In CISA KEV
Known exploit
Critical CVSS
High EPSS
Ransomware

Details

Severity
High
CVSS
10
EPSS
94.5%
CWE
CWE-22
Exploit
POC
CISA KEV
Yes
Ransomware
Known
Articles
0

Timeline

Published

Nov 3, 2021

Added to KEV

Nov 3, 2021

Remediation Due

May 3, 2022

Affected Product

Ivanti

Pulse Connect Secure

View all Ivanti CVEs

External Links

NVD (NIST)CVE DetailsMITRE CVE