DETECTION OVERVIEW
Risk Factors
Pulse Connect Secure (PCS) VPN gateways are commonly deployed in enterprise environments to manage SSL/TLS VPN connections that originate from the internet. This vulnerability enables attackers to steal sensitive data or install malware to facilitate additional attacks on the network.
Kill Chain
Risk Score
92
A PCS is a VPN gateway application that authorizes external access to internal network resources. An attacker can bypass authentication by submitting HTTP requests to vulnerable endpoints within Windows File Share Browser and Pulse Secure Collaboration features. This vulnerability enables an attacker to access internal files and perform many actions on network devices, such as installing webshells and running malicious commands.