What’s Vulnerable › Vulnerabilities

CVE-2021-33601: Arbitrary Code Execution in Web Interface of F-Secure Internet Gatekeeper

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-09-28 · updated 2026-06-17

Description

A vulnerability was discovered in the web user interface of F-Secure Internet Gatekeeper. An authenticated user can modify settings through the web user interface in a way that could lead to an arbitrary code execution on the F-Secure Internet Gatekeeper server.

Affected products

• F-Secure Internet Gatekeeper: from 5.10 through 5.50.47

References

• https://www.f-secure.com/en/business/programs/vulnerability-reward-program/hall-of-fame
• https://www.f-secure.com/en/business/support-and-downloads/security-advisories/cve-2021-33601
• https://www.f-secure.com/en/business/programs/vulnerability-reward-program/hall-of-fame
• https://www.f-secure.com/en/business/support-and-downloads/security-advisories/cve-2021-33601

Get alerted when CVE-2021-33601 or the next vulnerability affects your stack