CVE-2021-27860

💻 Affected Systems

📦 What is this software?

⚠️ Risk & Real-World Impact

🎯 Exploit Status

Exploitation is trivial - requires only HTTP requests to upload files. CISA lists this as known exploited in the wild.

🔍 How to Verify

Check the firmware version in the web interface under System > Status > Firmware Version

Login to web interface and navigate to System > Status, or check via CLI if available

Verify the firmware version is 10.1.2r60p92 or higher for 10.1.x, or 10.2.2r44p1 or higher for 10.2.x

📡 Detection & Monitoring

source="fatpipe_logs" AND (http_method="POST" AND uri CONTAINS "upload" OR http_status=200 AND file_extension IN (".php", ".jsp", ".asp", ".exe"))

🔗 References

• https://www.fatpipeinc.com/support/cve-list.php Vendor Advisory
• https://www.ic3.gov/Media/News/2021/211117-2.pdf Exploit,Mitigation,Third Party Advisory,US Government Resource
• https://www.fatpipeinc.com/support/cve-list.php Vendor Advisory
• https://www.ic3.gov/Media/News/2021/211117-2.pdf Exploit,Mitigation,Third Party Advisory,US Government Resource
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-27860 US Government Resource