Exposures › CVE-2021-27860

CVE-2021-27860

Severity

high · on CISA KEV actively exploited

Source

CISA-KEV · kev

Published

2022-01-10

Reference

https://nvd.nist.gov/vuln/detail/CVE-2021-27860

⚡ RCE ⌖ exploited in the wild shame 65/100 rceexploited-in-wild

A vulnerability in the web management interface of FatPipe WARP, IPVPN, and MPVPN software allows a remote, unauthenticated attacker to upload a file to any location on the filesystem.

Players implicated

FatPipe · vendor WARP, IPVPN, and MPVPN software · product

Description

A vulnerability in the web management interface of FatPipe WARP, IPVPN, and MPVPN software allows a remote, unauthenticated attacker to upload a file to any location on the filesystem.

Affected FedRAMP products 0 in the catalog

No correlated FedRAMP products.