← CVE Intelligence

CVE-2021-27860

Arbitrary file upload vulnerability in FatPipe software PUBLISHED

Description (CNA)

A vulnerability in the web management interface of FatPipe WARP, IPVPN, and MPVPN software prior to versions 10.1.2r60p92 and 10.2.2r44p1 allows a remote, unauthenticated attacker to upload a file to any location on the filesystem. The FatPipe advisory identifier for this vulnerability is FPSA006.

Affected (CNA)

Vendor / productVersions
FatPipe / WARPaffected 10.1 before 10.1.2r60p92; affected 10.2 before 10.2.2r44p1
FatPipe / IPVPNaffected 10.1 before 10.1.2r60p92; affected 10.2 before 10.2.2r44p1
FatPipe / MPVPNaffected 10.1 before 10.1.2r60p92; affected 10.2 before 10.2.2r44p1

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.