Actively exploited · Published Feb 16, 2021 · Assigned by mitre
CVE-2021-27101
Critical 9.8 Exploited Ransomware
In plain English
A critical-severity security flaw in FTA from Accellion. Attackers are actively exploiting it in the wild (listed by CISA on November 3, 2021). It has been used in ransomware campaigns. The chance it is exploited in the next 30 days is estimated at 6.0% (higher than 93% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code. Apply updates per vendor instructions.
CISA guidance
Apply updates per vendor instructions.
Federal agencies must remediate by Nov 17, 2021.
Official description
Accellion FTA 9_12_370 and earlier is affected by SQL injection via a crafted Host header in a request to document_root.html. The fixed version is FTA_9_12_380 and later.
Affected products (as reported)
References
- https://www.accellion.com/products/fta/ x_refsource_MISC
- https://github.com/accellion/CVEs/blob/main/CVE-2021-27101.txt x_refsource_MISC
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-27101 government-resource