CVE-2021-27860: Arbitrary file upload vulnerability in FatPipe software

Published Dec 8, 2021
·
Updated

A vulnerability in the web management interface of FatPipe WARP, IPVPN, and MPVPN software allows a remote, unauthenticated attacker to upload a file to any location on the filesystem.

Other sources

A vulnerability in the web management interface of FatPipe WARP, IPVPN, and MPVPN software prior to versions 10.1.2r60p92 and 10.2.2r44p1 allows a remote, unauthenticated attacker to upload a file to any location on the filesystem. The FatPipe advisory identifier for this vulnerability is FPSA006.

Affected Software

223 affected components
Fatpipeinc Ipvpn Firmware=5.2.0-r34
Fatpipeinc Ipvpn Firmware=6.1.2-r70p26
Fatpipeinc Ipvpn Firmware=6.1.2-r70p45-m
Fatpipeinc Ipvpn Firmware=6.1.2-r70p75-m
Fatpipeinc Ipvpn Firmware=7.1.2-r39
Fatpipeinc Ipvpn Firmware=9.1.2-r129
Fatpipeinc Ipvpn Firmware=9.1.2-r144
Fatpipeinc Ipvpn Firmware=9.1.2-r150
Fatpipeinc Ipvpn Firmware=9.1.2-r156
Fatpipeinc Ipvpn Firmware=9.1.2-r161p12
Fatpipeinc Ipvpn Firmware=9.1.2-r161p16
Fatpipeinc Ipvpn Firmware=9.1.2-r161p17
Fatpipeinc Ipvpn Firmware=9.1.2-r161p2
Fatpipeinc Ipvpn Firmware=9.1.2-r161p20
Fatpipeinc Ipvpn Firmware=9.1.2-r161p26
Fatpipeinc Ipvpn Firmware=9.1.2-r161p3
Fatpipeinc Ipvpn Firmware=9.1.2-r164
Fatpipeinc Ipvpn Firmware=9.1.2-r164p4
Fatpipeinc Ipvpn Firmware=9.1.2-r164p5
Fatpipeinc Ipvpn Firmware=9.1.2-r165
Fatpipeinc Ipvpn Firmware=9.1.2-r180p2
Fatpipeinc Ipvpn Firmware=9.1.2-r185
Fatpipeinc Ipvpn Firmware=10.1.2-r60p10
Fatpipeinc Ipvpn Firmware=10.1.2-r60p13
Fatpipeinc Ipvpn Firmware=10.1.2-r60p32
Fatpipeinc Ipvpn Firmware=10.1.2-r60p35
Fatpipeinc Ipvpn Firmware=10.1.2-r60p45
Fatpipeinc Ipvpn Firmware=10.1.2-r60p55
Fatpipeinc Ipvpn Firmware=10.1.2-r60p58
Fatpipeinc Ipvpn Firmware=10.1.2-r60p58s1
Fatpipeinc Ipvpn Firmware=10.1.2-r60p65
Fatpipeinc Ipvpn Firmware=10.1.2-r60p71
Fatpipeinc Ipvpn Firmware=10.1.2-r60p82
Fatpipeinc Ipvpn Firmware=10.2.2-r10
Fatpipeinc Ipvpn Firmware=10.2.2-r25
Fatpipeinc Ipvpn Firmware=10.2.2-r38
Fatpipeinc Ipvpn
Fatpipeinc Warp Firmware=5.2.0-r34
Fatpipeinc Warp Firmware=6.1.2-r70p26
Fatpipeinc Warp Firmware=6.1.2-r70p45-m
Fatpipeinc Warp Firmware=6.1.2-r70p75-m
Fatpipeinc Warp Firmware=7.1.2-r39
Fatpipeinc Warp Firmware=9.1.2-r129
Fatpipeinc Warp Firmware=9.1.2-r144
Fatpipeinc Warp Firmware=9.1.2-r150
Fatpipeinc Warp Firmware=9.1.2-r156
Fatpipeinc Warp Firmware=9.1.2-r161p12
Fatpipeinc Warp Firmware=9.1.2-r161p16
Fatpipeinc Warp Firmware=9.1.2-r161p17
Fatpipeinc Warp Firmware=9.1.2-r161p2
Fatpipeinc Warp Firmware=9.1.2-r161p20
Fatpipeinc Warp Firmware=9.1.2-r161p26
Fatpipeinc Warp Firmware=9.1.2-r161p3
Fatpipeinc Warp Firmware=9.1.2-r164
Fatpipeinc Warp Firmware=9.1.2-r164p4
Fatpipeinc Warp Firmware=9.1.2-r164p5
Fatpipeinc Warp Firmware=9.1.2-r165
Fatpipeinc Warp Firmware=9.1.2-r180p2
Fatpipeinc Warp Firmware=9.1.2-r185
Fatpipeinc Warp Firmware=10.1.2-r60p10
Fatpipeinc Warp Firmware=10.1.2-r60p13
Fatpipeinc Warp Firmware=10.1.2-r60p32
Fatpipeinc Warp Firmware=10.1.2-r60p35
Fatpipeinc Warp Firmware=10.1.2-r60p45
Fatpipeinc Warp Firmware=10.1.2-r60p55
Fatpipeinc Warp Firmware=10.1.2-r60p58
Fatpipeinc Warp Firmware=10.1.2-r60p58s1
Fatpipeinc Warp Firmware=10.1.2-r60p65
Fatpipeinc Warp Firmware=10.1.2-r60p71
Fatpipeinc Warp Firmware=10.1.2-r60p82
Fatpipeinc Warp Firmware=10.2.2-r10
Fatpipeinc Warp Firmware=10.2.2-r25
Fatpipeinc Warp Firmware=10.2.2-r38
Fatpipeinc Warp
Fatpipeinc Mpvpn Firmware=5.2.0-r34
Fatpipeinc Mpvpn Firmware=6.1.2-r70p26
Fatpipeinc Mpvpn Firmware=6.1.2-r70p45-m
Fatpipeinc Mpvpn Firmware=6.1.2-r70p75-m
Fatpipeinc Mpvpn Firmware=7.1.2-r39
Fatpipeinc Mpvpn Firmware=9.1.2-r129
Fatpipeinc Mpvpn Firmware=9.1.2-r144
Fatpipeinc Mpvpn Firmware=9.1.2-r150
Fatpipeinc Mpvpn Firmware=9.1.2-r156
Fatpipeinc Mpvpn Firmware=9.1.2-r161p12
Fatpipeinc Mpvpn Firmware=9.1.2-r161p16
Fatpipeinc Mpvpn Firmware=9.1.2-r161p17
Fatpipeinc Mpvpn Firmware=9.1.2-r161p2
Fatpipeinc Mpvpn Firmware=9.1.2-r161p20
Fatpipeinc Mpvpn Firmware=9.1.2-r161p26
Fatpipeinc Mpvpn Firmware=9.1.2-r161p3
Fatpipeinc Mpvpn Firmware=9.1.2-r164
Fatpipeinc Mpvpn Firmware=9.1.2-r164p4
Fatpipeinc Mpvpn Firmware=9.1.2-r164p5
Fatpipeinc Mpvpn Firmware=9.1.2-r165
Fatpipeinc Mpvpn Firmware=9.1.2-r180p2
Fatpipeinc Mpvpn Firmware=9.1.2-r185
Fatpipeinc Mpvpn Firmware=10.1.2-r60p10
Fatpipeinc Mpvpn Firmware=10.1.2-r60p13
Fatpipeinc Mpvpn Firmware=10.1.2-r60p32
Fatpipeinc Mpvpn Firmware=10.1.2-r60p35
Fatpipeinc Mpvpn Firmware=10.1.2-r60p45
Fatpipeinc Mpvpn Firmware=10.1.2-r60p55
Fatpipeinc Mpvpn Firmware=10.1.2-r60p58
Fatpipeinc Mpvpn Firmware=10.1.2-r60p58s1
Fatpipeinc Mpvpn Firmware=10.1.2-r60p65
Fatpipeinc Mpvpn Firmware=10.1.2-r60p71
Fatpipeinc Mpvpn Firmware=10.1.2-r60p82
Fatpipeinc Mpvpn Firmware=10.2.2-r10
Fatpipeinc Mpvpn Firmware=10.2.2-r25
Fatpipeinc Mpvpn Firmware=10.2.2-r38
Fatpipeinc Mpvpn
FatPipe WARP, IPVPN, and MPVPN software
All of the following
Any of the following
Fatpipeinc Ipvpn Firmware=5.2.0-r34
Fatpipeinc Ipvpn Firmware=6.1.2-r70p26
Fatpipeinc Ipvpn Firmware=6.1.2-r70p45-m
Fatpipeinc Ipvpn Firmware=6.1.2-r70p75-m
Fatpipeinc Ipvpn Firmware=7.1.2-r39
Fatpipeinc Ipvpn Firmware=9.1.2-r129
Fatpipeinc Ipvpn Firmware=9.1.2-r144
Fatpipeinc Ipvpn Firmware=9.1.2-r150
Fatpipeinc Ipvpn Firmware=9.1.2-r156
Fatpipeinc Ipvpn Firmware=9.1.2-r161p12
Fatpipeinc Ipvpn Firmware=9.1.2-r161p16
Fatpipeinc Ipvpn Firmware=9.1.2-r161p17
Fatpipeinc Ipvpn Firmware=9.1.2-r161p2
Fatpipeinc Ipvpn Firmware=9.1.2-r161p20
Fatpipeinc Ipvpn Firmware=9.1.2-r161p26
Fatpipeinc Ipvpn Firmware=9.1.2-r161p3
Fatpipeinc Ipvpn Firmware=9.1.2-r164
Fatpipeinc Ipvpn Firmware=9.1.2-r164p4
Fatpipeinc Ipvpn Firmware=9.1.2-r164p5
Fatpipeinc Ipvpn Firmware=9.1.2-r165
Fatpipeinc Ipvpn Firmware=9.1.2-r180p2
Fatpipeinc Ipvpn Firmware=9.1.2-r185
Fatpipeinc Ipvpn Firmware=10.1.2-r60p10
Fatpipeinc Ipvpn Firmware=10.1.2-r60p13
Fatpipeinc Ipvpn Firmware=10.1.2-r60p32
Fatpipeinc Ipvpn Firmware=10.1.2-r60p35
Fatpipeinc Ipvpn Firmware=10.1.2-r60p45
Fatpipeinc Ipvpn Firmware=10.1.2-r60p55
Fatpipeinc Ipvpn Firmware=10.1.2-r60p58
Fatpipeinc Ipvpn Firmware=10.1.2-r60p58s1
Fatpipeinc Ipvpn Firmware=10.1.2-r60p65
Fatpipeinc Ipvpn Firmware=10.1.2-r60p71
Fatpipeinc Ipvpn Firmware=10.1.2-r60p82
Fatpipeinc Ipvpn Firmware=10.2.2-r10
Fatpipeinc Ipvpn Firmware=10.2.2-r25
Fatpipeinc Ipvpn Firmware=10.2.2-r38
Fatpipeinc Ipvpn
All of the following
Any of the following
Fatpipeinc Warp Firmware=5.2.0-r34
Fatpipeinc Warp Firmware=6.1.2-r70p26
Fatpipeinc Warp Firmware=6.1.2-r70p45-m
Fatpipeinc Warp Firmware=6.1.2-r70p75-m
Fatpipeinc Warp Firmware=7.1.2-r39
Fatpipeinc Warp Firmware=9.1.2-r129
Fatpipeinc Warp Firmware=9.1.2-r144
Fatpipeinc Warp Firmware=9.1.2-r150
Fatpipeinc Warp Firmware=9.1.2-r156
Fatpipeinc Warp Firmware=9.1.2-r161p12
Fatpipeinc Warp Firmware=9.1.2-r161p16
Fatpipeinc Warp Firmware=9.1.2-r161p17
Fatpipeinc Warp Firmware=9.1.2-r161p2
Fatpipeinc Warp Firmware=9.1.2-r161p20
Fatpipeinc Warp Firmware=9.1.2-r161p26
Fatpipeinc Warp Firmware=9.1.2-r161p3
Fatpipeinc Warp Firmware=9.1.2-r164
Fatpipeinc Warp Firmware=9.1.2-r164p4
Fatpipeinc Warp Firmware=9.1.2-r164p5
Fatpipeinc Warp Firmware=9.1.2-r165
Fatpipeinc Warp Firmware=9.1.2-r180p2
Fatpipeinc Warp Firmware=9.1.2-r185
Fatpipeinc Warp Firmware=10.1.2-r60p10
Fatpipeinc Warp Firmware=10.1.2-r60p13
Fatpipeinc Warp Firmware=10.1.2-r60p32
Fatpipeinc Warp Firmware=10.1.2-r60p35
Fatpipeinc Warp Firmware=10.1.2-r60p45
Fatpipeinc Warp Firmware=10.1.2-r60p55
Fatpipeinc Warp Firmware=10.1.2-r60p58
Fatpipeinc Warp Firmware=10.1.2-r60p58s1
Fatpipeinc Warp Firmware=10.1.2-r60p65
Fatpipeinc Warp Firmware=10.1.2-r60p71
Fatpipeinc Warp Firmware=10.1.2-r60p82
Fatpipeinc Warp Firmware=10.2.2-r10
Fatpipeinc Warp Firmware=10.2.2-r25
Fatpipeinc Warp Firmware=10.2.2-r38
Fatpipeinc Warp
All of the following
Any of the following
Fatpipeinc Mpvpn Firmware=5.2.0-r34
Fatpipeinc Mpvpn Firmware=6.1.2-r70p26
Fatpipeinc Mpvpn Firmware=6.1.2-r70p45-m
Fatpipeinc Mpvpn Firmware=6.1.2-r70p75-m
Fatpipeinc Mpvpn Firmware=7.1.2-r39
Fatpipeinc Mpvpn Firmware=9.1.2-r129
Fatpipeinc Mpvpn Firmware=9.1.2-r144
Fatpipeinc Mpvpn Firmware=9.1.2-r150
Fatpipeinc Mpvpn Firmware=9.1.2-r156
Fatpipeinc Mpvpn Firmware=9.1.2-r161p12
Fatpipeinc Mpvpn Firmware=9.1.2-r161p16
Fatpipeinc Mpvpn Firmware=9.1.2-r161p17
Fatpipeinc Mpvpn Firmware=9.1.2-r161p2
Fatpipeinc Mpvpn Firmware=9.1.2-r161p20
Fatpipeinc Mpvpn Firmware=9.1.2-r161p26
Fatpipeinc Mpvpn Firmware=9.1.2-r161p3
Fatpipeinc Mpvpn Firmware=9.1.2-r164
Fatpipeinc Mpvpn Firmware=9.1.2-r164p4
Fatpipeinc Mpvpn Firmware=9.1.2-r164p5
Fatpipeinc Mpvpn Firmware=9.1.2-r165
Fatpipeinc Mpvpn Firmware=9.1.2-r180p2
Fatpipeinc Mpvpn Firmware=9.1.2-r185
Fatpipeinc Mpvpn Firmware=10.1.2-r60p10
Fatpipeinc Mpvpn Firmware=10.1.2-r60p13
Fatpipeinc Mpvpn Firmware=10.1.2-r60p32
Fatpipeinc Mpvpn Firmware=10.1.2-r60p35
Fatpipeinc Mpvpn Firmware=10.1.2-r60p45
Fatpipeinc Mpvpn Firmware=10.1.2-r60p55
Fatpipeinc Mpvpn Firmware=10.1.2-r60p58
Fatpipeinc Mpvpn Firmware=10.1.2-r60p58s1
Fatpipeinc Mpvpn Firmware=10.1.2-r60p65
Fatpipeinc Mpvpn Firmware=10.1.2-r60p71
Fatpipeinc Mpvpn Firmware=10.1.2-r60p82
Fatpipeinc Mpvpn Firmware=10.2.2-r10
Fatpipeinc Mpvpn Firmware=10.2.2-r25
Fatpipeinc Mpvpn Firmware=10.2.2-r38
Fatpipeinc Mpvpn

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Upgrade

    Upgrade FatPipe WARP, IPVPN, and MPVPN to a version that resolves this vulnerability.

    Fixed in 10.1.2r60p92
  2. Upgrade

    Upgrade FatPipe WARP, IPVPN, and MPVPN to a version that resolves this vulnerability.

    Fixed in 10.2.2r44p1
  3. Upgrade

    Upgrade FatPipe WARP, IPVPN, and MPVPN to a version that resolves this vulnerability.

    Patch FPSA006

Event History

Dec 8, 2021
CVE Published
via MITRE·04:15 PM
Data Sourced
via MITRE·04:15 PM
DescriptionSeverity
Data Sourced
via NVD·05:15 PM
DescriptionSeverityWeaknessAffected Software
Jan 10, 2022
Known Exploited
via CISA·12:00 AM
Dec 31, 2024
News Published
via The Register·12:15 PM
News Published
via The Register·12:17 PM

Frequently Asked Questions

1

What is the severity of CVE-2021-27860?

CVE-2021-27860 is classified as a critical vulnerability due to the potential for remote, unauthenticated file uploads.

2

How do I fix CVE-2021-27860?

To mitigate CVE-2021-27860, upgrade the FatPipe WARP, IPVPN, or MPVPN software to the latest version as specified by the vendor.

3

What products are affected by CVE-2021-27860?

CVE-2021-27860 affects FatPipe WARP, IPVPN, and MPVPN software versions prior to fixed releases.

4

Can exploit of CVE-2021-27860 lead to data compromise?

Yes, successful exploitation of CVE-2021-27860 can allow an attacker to upload arbitrary files, potentially leading to data compromise.

5

Is there a workaround for CVE-2021-27860 while waiting for a patch?

Currently, the best workaround for CVE-2021-27860 is to restrict access to the management interface or implement firewall rules until a patch is applied.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203