CVE-2021-47891

9.3 criticalEPSS 0.9%

Critical (9.3). EPSS 0.9% chance of exploitation in the next 30 days.

Unified Remote 3.9.0.2463 contains a remote code execution vulnerability that allows attackers to send crafted network packets to execute arbitrary commands. Attackers can exploit the service by connecting to port 9512 and sending specially crafted packets to open a command prompt and download and execute malicious payloads.

Severity

CVSS 4.0

9.3 critical

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 61% of CVEs (scores of 2026-10-31)
CWE: CWE-306
Published: 2026-01-23
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://www.exploit-db.com/exploits/49587
https://www.unifiedremote.com/
https://www.unifiedremote.com/download
https://www.vulncheck.com/advisories/unified-remote-remote-code-execution

Check your stack JSON