- Vendor / Project
- FatPipe
- Product
- WARP, IPVPN, and MPVPN software
- Date added
- Jan 10, 2022
- Due date
- Jan 24, 2022
- Known ransomware use
- Unknown
- CWEs
- CWE-434
Description
A vulnerability in the web management interface of FatPipe WARP, IPVPN, and MPVPN software allows a remote, unauthenticated attacker to upload a file to any location on the filesystem.
Required action
Apply updates per vendor instructions.