First published: Tue Sep 28 2021(Updated: )
A vulnerability was discovered in the web user interface of F-Secure Internet Gatekeeper. An authenticated user can modify settings through the web user interface in a way that could lead to an arbitrary code execution on the F-Secure Internet Gatekeeper server.
Credit: cve-notifications-us@f-secure.com
Affected Software | Affected Version | How to fix |
---|---|---|
F-secure Internet Gatekeeper | >=5.10<=5.50.47 |
FIX: Hotfix 9 will be published to fix this vulnerability. Download and instructions available at: https://www.f-secure.com/en/business/downloads/internet-gatekeeper
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2021-33601 is a vulnerability discovered in the web user interface of F-Secure Internet Gatekeeper.
The severity of CVE-2021-33601 is high with a CVSS score of 8.8.
An authenticated user can exploit CVE-2021-33601 by modifying settings through the web user interface, potentially leading to arbitrary code execution on the F-Secure Internet Gatekeeper server.
F-Secure Internet Gatekeeper versions between 5.10 and 5.50.47 are affected by CVE-2021-33601.
You can find more information about CVE-2021-33601 in F-Secure's vulnerability reward program hall of fame and security advisories.