← CVE Radar
CVE-2019-11539Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability
In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, 8.2RX before 8.2R12.1, and 8.1RX before 8.1R15.1 and Pulse Policy Secure version 9.0RX before 9.0R3.2, 5.4RX before 5.4R7.1, 5.3RX before 5.3R12.1, 5.2RX before 5.2R12.1, and 5.1RX before 5.1R15.1, the admin web interface allows an authenticated attacker to inject and execute commands.
7.2 HIGHEPSS 98.54%⚡ Known Exploited (CISA KEV)NVD: Analyzed
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 7.2 | HIGH | 3.1NVD | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H |
| 8.0 | HIGH | 3.0mitre (CNA) | CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H |
| 8.0 | HIGH | 3.0mitre (CNA) | CVSS:3.0/AC:H/AV:N/A:H/C:H/I:H/PR:H/S:C/UI:N |
| 6.5 | MEDIUM | 2.0NVD | AV:N/AC:L/Au:S/C:P/I:P/A:P |
CISA required action
⚡ Known exploited · remediation due May 3, 2022
Apply updates per vendor instructions.
Details
- CVE ID
- CVE-2019-11539
- Status
- Analyzed
- Assigner (CNA)
- mitre
- Published
- Apr 26, 2019
- Last modified
- 2026-06-17 02:13 UTC
- Weaknesses
Affected Products
From NVD CPE configurations.
ivanticonnect secure67 version ranges
- 8.1
- 8.1 r1.0
- 8.1 r1.1
- 8.1 r10.0
- 8.1 r11.0
- 8.1 r11.1
- 8.1 r12.0
- 8.1 r12.1
- 8.1 r13.0
- 8.1 r14.0
- 8.1 r2.0
- 8.1 r2.1
- 8.1 r3.0
- 8.1 r3.1
- 8.1 r3.2
- 8.1 r4.0
- 8.1 r4.1
- 8.1 r5.0
- 8.1 r6.0
- 8.1 r7
- 8.1 r7.0
- 8.1 r8.0
- 8.1 r9.0
- 8.1 r9.1
- 8.1 r9.2
- 8.2
- 8.2 r1
- 8.2 r1.0
- 8.2 r1.1
- 8.2 r10.0
- 8.2 r11.0
- 8.2 r12.0
- 8.2 r2.0
- 8.2 r3.0
- 8.2 r3.1
- 8.2 r4.0
- 8.2 r4.1
- 8.2 r5.0
- 8.2 r5.1
- 8.2 r6.0
- 8.2 r7.0
- 8.2 r7.1
- 8.2 r7.2
- 8.2 r8.0
- 8.2 r8.1
- 8.2 r8.2
- 8.2 r9.0
- 8.3
- 8.3 r1
- 8.3 r1.1
- 8.3 r2
- 8.3 r2.1
- 8.3 r3
- 8.3 r4
- 8.3 r5
- 8.3 r5.1
- 8.3 r5.2
- 8.3 r6
- 8.3 r6.1
- 8.3 r7
- 9.0 r1
- 9.0 r2
- 9.0 r2.1
- 9.0 r3
- 9.0 r3.1
- 9.0 r3.2
- 9.0 r3.3
ivantipolicy secure5 version ranges
- 9.0 r1
- 9.0 r2
- 9.0 r2.1
- 9.0 r3
- 9.0 r3.1
pulsesecurepulse policy secure66 version ranges
- 5.1r1.0
- 5.1r1.1
- 5.1r2.0
- 5.1r2.1
- 5.1r3.0
- 5.1r3.2
- 5.1r4.0
- 5.1r5.0
- 5.1r6.0
- 5.1r7.0
- 5.1r8.0
- 5.1r9.0
- 5.1r9.1
- 5.1r10.0
- 5.1r11.0
- 5.1r11.1
- 5.1r12.0
- 5.1r12.1
- 5.1r13.0
- 5.1r14.0
- 5.2r1.0
- 5.2r2.0
- 5.2r3.0
- 5.2r3.2
- 5.2r4.0
- 5.2r5.0
- 5.2r6.0
- 5.2r7.0
- 5.2r7.1
- 5.2r8.0
- 5.2r9.0
- 5.2r9.1
- 5.2r10.0
- 5.2r11.0
- 5.2rx
- 5.3r1.0
- 5.3r1.1
- 5.3r2.0
- 5.3r3.0
- 5.3r3.1
- 5.3r4.0
- 5.3r4.1
- 5.3r5.0
- 5.3r5.1
- 5.3r5.2
- 5.3r6.0
- 5.3r7.0
- 5.3r8.0
- 5.3r8.1
- 5.3r8.2
- 5.3r9.0
- 5.3r10.
- 5.3r11.0
- 5.3r12.0
- 5.3rx
- 5.4r1
- 5.4r2
- 5.4r2.1
- 5.4r3
- 5.4r4
- 5.4r5
- 5.4r5.2
- 5.4r6
- 5.4r6.1
- 5.4r7
- 5.4rx
References
- packetstormsecurity.com http://packetstormsecurity.com/files/154376/Pulse-Secure-8.1R15.1-8.2-8.3-9.0-SSL-VPN-Remote-Code-Execution.html
- packetstormsecurity.com http://packetstormsecurity.com/files/155277/Pulse-Secure-VPN-Arbitrary-Command-Execution.html
- packetstormsecurity.com http://packetstormsecurity.com/files/162092/Pulse-Secure-VPN-Arbitrary-Command-Execution.html
- securityfocus.com http://www.securityfocus.com/bid/108073
- devco.re https://devco.re/blog/2019/09/02/attacking-ssl-vpn-part-3-the-golden-Pulse-Secure-ssl-vpn-rce-chain-with-Twitter-as-case-study/
- i.blackhat.com https://i.blackhat.com/USA-19/Wednesday/us-19-Tsai-Infiltrating-Corporate-Intranet-Like-NSA.pdf
- kb.pulsesecure.net https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44101
- psirt.global.sonicwall.com https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0010
- kb.cert.org https://www.kb.cert.org/vuls/id/927237
- cisa.gov https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-11539