ShareFile < 5.11.20 RCE (CVE-2021-22941)

critical Nessus Plugin ID 156614


The Citrix Sharefile Storage Zones Controller instance found on the remote host is affected by a remote code vulnerability.


A remote code execution vulnerability exists in Citrix ShareFile StorageZones Controller due to improper access control. An unauthenticated, remote attacker can exploit this to bypass authentication and execute arbitrary commands.


Update ShareFile storage zone controller to 5.11.20 or later.

See Also

Plugin Details

Severity: Critical

ID: 156614

File Name: citrix_sharefile_controller_CVE-2021-22941.nbin

Version: 1.41

Type: remote

Family: Web Servers

Published: 1/11/2022

Updated: 5/20/2024

Supported Sensors: Nessus

Risk Information


Risk Factor: High

Score: 7.4


Risk Factor: Critical

Base Score: 10

Temporal Score: 8.3

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS Score Source: CVE-2021-22941


Risk Factor: Critical

Base Score: 9.8

Temporal Score: 9.1

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:F/RL:O/RC:C

Vulnerability Information

CPE: cpe:/a:citrix:sharefile

Required KB Items: installed_sw/Citrix ShareFile StorageZones Controller

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 9/8/2021

Vulnerability Publication Date: 9/8/2021

CISA Known Exploited Vulnerability Due Dates: 4/15/2022

Reference Information

CVE: CVE-2021-22941