CVE-2021-27860 — FatPipe WARP, IPVPN, and MPVPN Configuration Upload exploit

CISA KEV listed Added January 10, 2022 Remediate by January 24, 2022

Description

A vulnerability in the web management interface of FatPipe WARP, IPVPN, and MPVPN software allows a remote, unauthenticated attacker to upload a file to any location on the filesystem.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2021-27860

Need help remediating this vulnerability?

Our team helps organizations patch, mitigate, and respond to CISA KEV advisories fast.

Talk to an engineer