Login Request a demo
High severity · published Jul 12, 2017
CVE-2017-11193
Pulse Connect Secure 8.3R1 has CSRF in diag.cgi
8.8
CVSS
0.6%
EPSS
No
On KEV
Description
Pulse Connect Secure 8.3R1 has CSRF in diag.cgi. In the panel, the diag.cgi file is responsible for running commands such as ping, ping6, traceroute, traceroute6, nslookup, arp, and Portprobe. These functions do not have any protections against CSRF. That can allow an attacker to run these commands against any IP if they can get an admin to visit their malicious CSRF page.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 46% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PC
Pulse Connect Secure · Pulsesecure
8.3r1.0 · source: NVD
Affected product
PC
Pulse Connect Secure
Pulsesecure
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2017-11193
CVE.org
https://www.cve.org/CVERecord?id=CVE-2017-11193
www.securityfocus.com
http://www.securityfocus.com/bid/99621
Third Party Advisory
http://www.sxcurity.pro/Multiple%20XSS%20and%20CSRF%20in%20Pulse%20Connect%20Secure%20v8.3R1.pdf
Third Party Advisory
https://twitter.com/sxcurity/status/884556905145937921
More from Pulse Connect Secure
7.2
CVE-2021-22900
Ivanti Pulse Connect Secure Unrestricted File Upload Vulnerability
10.0
CVE-2016-4787
Pulse Connect Secure (PCS) 8.2 before 8.2r1, 8.1 before 8.1r2, 8.0 before 8.0r10, and 7.4 before 7.4r13.4 allow remote attackers to read sensitive system authentication files in…
9.8
CVE-2019-11540
In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4 and 8.3RX before 8.3R7.1 and Pulse Policy Secure version 9.0RX before 9.0R3.2 and 5.4RX before 5.4R7.1, an…
9.8
CVE-2018-6320
A vulnerability has been discovered in login.cgi in Pulse Secure Pulse Connect Secure (PCS) 8.1RX before 8.1R12 and 8.3RX before 8.3R2 and Pulse Policy Secure (PPS) 5.2RX before…
9.8
CVE-2018-5299
A stack-based Buffer Overflow Vulnerability exists in the web server in Pulse Secure Pulse Connect Secure (PCS) before 8.3R4 and Pulse Policy Secure (PPS) before 5.4R4, leading to…