CVE-2021-27855

fatpipeinc ipvpn firmware, fatpipeinc warp firmware

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2021-27855

Katalog CVE

CVSS 8.8 · High EPSS 1,7%

Kerentanan Missing Authorization pada fatpipeinc ipvpn firmware, fatpipeinc warp firmware. Skor CVSS 3.1 8.8 (High) menurut NVD.

Deskripsi (NVD)

FatPipe WARP, IPVPN, and MPVPN software prior to versions 10.1.2r60p91 and 10.2.2r42 allows a remote, authenticated attacker with read-only privileges to grant themselves administrative privileges. Older versions of FatPipe software may also be vulnerable. The FatPipe advisory identifier for this vulnerability is FPSA001.

Rincian

Terbit di NVD
15 Desember 2021
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
8.8 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-862: Missing Authorization
EPSS (30 hari)
1,7% peluang dieksploitasi; lebih tinggi dari 76,0% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
fatpipeinc ipvpn firmware Versi 5.2.0 r34
fatpipeinc ipvpn firmware Versi 6.1.2 r70p26
fatpipeinc ipvpn firmware Versi 6.1.2 r70p45-m
fatpipeinc ipvpn firmware Versi 6.1.2 r70p75-m
fatpipeinc ipvpn firmware Versi 7.1.2 r39
fatpipeinc ipvpn firmware Versi 9.1.2 r129
fatpipeinc ipvpn firmware Versi 9.1.2 r144
fatpipeinc ipvpn firmware Versi 9.1.2 r150
fatpipeinc ipvpn firmware Versi 9.1.2 r156
fatpipeinc ipvpn firmware Versi 9.1.2 r161p12
fatpipeinc ipvpn firmware Versi 9.1.2 r161p16
fatpipeinc ipvpn firmware Versi 9.1.2 r161p17
fatpipeinc ipvpn firmware Versi 9.1.2 r161p2
fatpipeinc ipvpn firmware Versi 9.1.2 r161p20
fatpipeinc ipvpn firmware Versi 9.1.2 r161p26
fatpipeinc ipvpn firmware Versi 9.1.2 r161p3
fatpipeinc ipvpn firmware Versi 9.1.2 r164
fatpipeinc ipvpn firmware Versi 9.1.2 r164p4
fatpipeinc ipvpn firmware Versi 9.1.2 r164p5
fatpipeinc ipvpn firmware Versi 9.1.2 r165
fatpipeinc ipvpn firmware Versi 9.1.2 r180p2
fatpipeinc ipvpn firmware Versi 9.1.2 r185
fatpipeinc ipvpn firmware Versi 10.1.2 r60p10
fatpipeinc ipvpn firmware Versi 10.1.2 r60p13
fatpipeinc ipvpn firmware Versi 10.1.2 r60p32
fatpipeinc ipvpn firmware Versi 10.1.2 r60p35
fatpipeinc ipvpn firmware Versi 10.1.2 r60p45
fatpipeinc ipvpn firmware Versi 10.1.2 r60p55
fatpipeinc ipvpn firmware Versi 10.1.2 r60p58
fatpipeinc ipvpn firmware Versi 10.1.2 r60p58s1
fatpipeinc ipvpn firmware Versi 10.1.2 r60p65
fatpipeinc ipvpn firmware Versi 10.1.2 r60p71
fatpipeinc ipvpn firmware Versi 10.1.2 r60p82
fatpipeinc ipvpn firmware Versi 10.2.2 r10
fatpipeinc ipvpn firmware Versi 10.2.2 r25
fatpipeinc ipvpn firmware Versi 10.2.2 r38
fatpipeinc warp firmware Versi 5.2.0 r34
fatpipeinc warp firmware Versi 6.1.2 r70p26
fatpipeinc warp firmware Versi 6.1.2 r70p45-m
fatpipeinc warp firmware Versi 6.1.2 r70p75-m
fatpipeinc warp firmware Versi 7.1.2 r39
fatpipeinc warp firmware Versi 9.1.2 r129
fatpipeinc warp firmware Versi 9.1.2 r144
fatpipeinc warp firmware Versi 9.1.2 r150
fatpipeinc warp firmware Versi 9.1.2 r156
fatpipeinc warp firmware Versi 9.1.2 r161p12
fatpipeinc warp firmware Versi 9.1.2 r161p16
fatpipeinc warp firmware Versi 9.1.2 r161p17
fatpipeinc warp firmware Versi 9.1.2 r161p2
fatpipeinc warp firmware Versi 9.1.2 r161p20
fatpipeinc warp firmware Versi 9.1.2 r161p26
fatpipeinc warp firmware Versi 9.1.2 r161p3
fatpipeinc warp firmware Versi 9.1.2 r164
fatpipeinc warp firmware Versi 9.1.2 r164p4
fatpipeinc warp firmware Versi 9.1.2 r164p5
fatpipeinc warp firmware Versi 9.1.2 r165
fatpipeinc warp firmware Versi 9.1.2 r180p2
fatpipeinc warp firmware Versi 9.1.2 r185
fatpipeinc warp firmware Versi 10.1.2 r60p10
fatpipeinc warp firmware Versi 10.1.2 r60p13

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 108 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.