Skip to content
Fencer Vulns
high 8.8

CVE-2021-22908 in the critical feed json

A buffer overflow vulnerability exists in Windows File Resource Profiles in 9.X allows a remote authenticated user with privileges to brows…

published 2021-05-27 5 y ago modified 2026-06-17 4 mo ago also EUVD-2021-10037

cvss
8.8
version 3.1, NVD
cisa kev
Not listed
not in CISA's catalog
epss
69.4%
EPSS 69.4% chance of exploitation in 30 days, percentile 99.3%
public exploits
0
none known

Summary

A buffer overflow vulnerability exists in Windows File Resource Profiles in 9.X allows a remote authenticated user with privileges to browse SMB shares to execute arbitrary code as the root user. As of version 9.1R3, this permission is not enabled by default.

Exploit prediction

69.38% chance of exploitation in the next 30 days, higher than 99.3% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
NVD 3.1 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD 2.0 9.0 AV:N/AC:L/Au:S/C:C/I:C/A:C

Affected products

  • n/a Pulse Connect Secure

Classification

Weakness
  • CWE-120 Buffer Copy without Checking Size of Input
Technology feeds

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.