CVE-2021-27855

EPSS 1.6%
Veröffentlicht 15.12.2021 20:15:07
Zuletzt bearbeitet 21.11.2024 05:58:38
Erkennungen
Login

FatPipe software allows privilege escalation

FatPipe WARP, IPVPN, and MPVPN software prior to versions 10.1.2r60p91 and 10.2.2r42 allows a remote, authenticated attacker with read-only privileges to grant themselves administrative privileges. Older versions of FatPipe software may also be vulnerable. The FatPipe advisory identifier for this vulnerability is FPSA001.

Betroffene Produkte Warnungen 0 Metriken 4 CWE 1 Referenzen 6

NVD 108 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Fatpipeinc ≫ Ipvpn Firmware Version 5.2.0 Update r34

Fatpipeinc ≫ Ipvpn Version -

Fatpipeinc ≫ Ipvpn Firmware Version 6.1.2 Update r70p26

Fatpipeinc ≫ Ipvpn Version -

Fatpipeinc ≫ Ipvpn Firmware Version 6.1.2 Update r70p45-m

Fatpipeinc ≫ Ipvpn Version -

Fatpipeinc ≫ Ipvpn Firmware Version 6.1.2 Update r70p75-m

Fatpipeinc ≫ Ipvpn Version -

Fatpipeinc ≫ Ipvpn Firmware Version 7.1.2 Update r39

Fatpipeinc ≫ Ipvpn Version -

Fatpipeinc ≫ Ipvpn Firmware Version 9.1.2 Update r129

Fatpipeinc ≫ Ipvpn Version -

Fatpipeinc ≫ Ipvpn Firmware Version 9.1.2 Update r144

Fatpipeinc ≫ Ipvpn Version -

Fatpipeinc ≫ Ipvpn Firmware Version 9.1.2 Update r150

Fatpipeinc ≫ Ipvpn Version -

Fatpipeinc ≫ Ipvpn Firmware Version 9.1.2 Update r156

Fatpipeinc ≫ Ipvpn Version -

Fatpipeinc ≫ Ipvpn Firmware Version 9.1.2 Update r161p12

Fatpipeinc ≫ Ipvpn Version -

Fatpipeinc ≫ Ipvpn Firmware Version 9.1.2 Update r161p16

Fatpipeinc ≫ Ipvpn Version -

Fatpipeinc ≫ Ipvpn Firmware Version 9.1.2 Update r161p17

Fatpipeinc ≫ Ipvpn Version -

Fatpipeinc ≫ Ipvpn Firmware Version 9.1.2 Update r161p2

Fatpipeinc ≫ Ipvpn Version -

Fatpipeinc ≫ Ipvpn Firmware Version 9.1.2 Update r161p20

Fatpipeinc ≫ Ipvpn Version -

Fatpipeinc ≫ Ipvpn Firmware Version 9.1.2 Update r161p26

Fatpipeinc ≫ Ipvpn Version -

Fatpipeinc ≫ Ipvpn Firmware Version 9.1.2 Update r161p3

Fatpipeinc ≫ Ipvpn Version -

Fatpipeinc ≫ Ipvpn Firmware Version 9.1.2 Update r164

Fatpipeinc ≫ Ipvpn Version -

Fatpipeinc ≫ Ipvpn Firmware Version 9.1.2 Update r164p4

Fatpipeinc ≫ Ipvpn Version -

Fatpipeinc ≫ Ipvpn Firmware Version 9.1.2 Update r164p5

Fatpipeinc ≫ Ipvpn Version -

Fatpipeinc ≫ Ipvpn Firmware Version 9.1.2 Update r165

Fatpipeinc ≫ Ipvpn Version -

Fatpipeinc ≫ Ipvpn Firmware Version 9.1.2 Update r180p2

Fatpipeinc ≫ Ipvpn Version -

Fatpipeinc ≫ Ipvpn Firmware Version 9.1.2 Update r185

Fatpipeinc ≫ Ipvpn Version -

Fatpipeinc ≫ Ipvpn Firmware Version 10.1.2 Update r60p10

Fatpipeinc ≫ Ipvpn Version -

Fatpipeinc ≫ Ipvpn Firmware Version 10.1.2 Update r60p13

Fatpipeinc ≫ Ipvpn Version -

Fatpipeinc ≫ Ipvpn Firmware Version 10.1.2 Update r60p32

Fatpipeinc ≫ Ipvpn Version -

Fatpipeinc ≫ Ipvpn Firmware Version 10.1.2 Update r60p35

Fatpipeinc ≫ Ipvpn Version -

Fatpipeinc ≫ Ipvpn Firmware Version 10.1.2 Update r60p45

Fatpipeinc ≫ Ipvpn Version -

Fatpipeinc ≫ Ipvpn Firmware Version 10.1.2 Update r60p55

Fatpipeinc ≫ Ipvpn Version -

Fatpipeinc ≫ Ipvpn Firmware Version 10.1.2 Update r60p58

Fatpipeinc ≫ Ipvpn Version -

Fatpipeinc ≫ Ipvpn Firmware Version 10.1.2 Update r60p58s1

Fatpipeinc ≫ Ipvpn Version -

Fatpipeinc ≫ Ipvpn Firmware Version 10.1.2 Update r60p65

Fatpipeinc ≫ Ipvpn Version -

Fatpipeinc ≫ Ipvpn Firmware Version 10.1.2 Update r60p71

Fatpipeinc ≫ Ipvpn Version -

Fatpipeinc ≫ Ipvpn Firmware Version 10.1.2 Update r60p82

Fatpipeinc ≫ Ipvpn Version -

Fatpipeinc ≫ Ipvpn Firmware Version 10.2.2 Update r10

Fatpipeinc ≫ Ipvpn Version -

Fatpipeinc ≫ Ipvpn Firmware Version 10.2.2 Update r25

Fatpipeinc ≫ Ipvpn Version -

Fatpipeinc ≫ Ipvpn Firmware Version 10.2.2 Update r38

Fatpipeinc ≫ Ipvpn Version -

Fatpipeinc ≫ Warp Firmware Version 5.2.0 Update r34

Fatpipeinc ≫ Warp Version -

Fatpipeinc ≫ Warp Firmware Version 6.1.2 Update r70p26

Fatpipeinc ≫ Warp Version -

Fatpipeinc ≫ Warp Firmware Version 6.1.2 Update r70p45-m

Fatpipeinc ≫ Warp Version -

Fatpipeinc ≫ Warp Firmware Version 6.1.2 Update r70p75-m

Fatpipeinc ≫ Warp Version -

Fatpipeinc ≫ Warp Firmware Version 7.1.2 Update r39

Fatpipeinc ≫ Warp Version -

Fatpipeinc ≫ Warp Firmware Version 9.1.2 Update r129

Fatpipeinc ≫ Warp Version -

Fatpipeinc ≫ Warp Firmware Version 9.1.2 Update r144

Fatpipeinc ≫ Warp Version -

Fatpipeinc ≫ Warp Firmware Version 9.1.2 Update r150

Fatpipeinc ≫ Warp Version -

Fatpipeinc ≫ Warp Firmware Version 9.1.2 Update r156

Fatpipeinc ≫ Warp Version -

Fatpipeinc ≫ Warp Firmware Version 9.1.2 Update r161p12

Fatpipeinc ≫ Warp Version -

Fatpipeinc ≫ Warp Firmware Version 9.1.2 Update r161p16

Fatpipeinc ≫ Warp Version -

Fatpipeinc ≫ Warp Firmware Version 9.1.2 Update r161p17

Fatpipeinc ≫ Warp Version -

Fatpipeinc ≫ Warp Firmware Version 9.1.2 Update r161p2

Fatpipeinc ≫ Warp Version -

Fatpipeinc ≫ Warp Firmware Version 9.1.2 Update r161p20

Fatpipeinc ≫ Warp Version -

Fatpipeinc ≫ Warp Firmware Version 9.1.2 Update r161p26

Fatpipeinc ≫ Warp Version -

Fatpipeinc ≫ Warp Firmware Version 9.1.2 Update r161p3

Fatpipeinc ≫ Warp Version -

Fatpipeinc ≫ Warp Firmware Version 9.1.2 Update r164

Fatpipeinc ≫ Warp Version -

Fatpipeinc ≫ Warp Firmware Version 9.1.2 Update r164p4

Fatpipeinc ≫ Warp Version -

Fatpipeinc ≫ Warp Firmware Version 9.1.2 Update r164p5

Fatpipeinc ≫ Warp Version -

Fatpipeinc ≫ Warp Firmware Version 9.1.2 Update r165

Fatpipeinc ≫ Warp Version -

Fatpipeinc ≫ Warp Firmware Version 9.1.2 Update r180p2

Fatpipeinc ≫ Warp Version -

Fatpipeinc ≫ Warp Firmware Version 9.1.2 Update r185

Fatpipeinc ≫ Warp Version -

Fatpipeinc ≫ Warp Firmware Version 10.1.2 Update r60p10

Fatpipeinc ≫ Warp Version -

Fatpipeinc ≫ Warp Firmware Version 10.1.2 Update r60p13

Fatpipeinc ≫ Warp Version -

Fatpipeinc ≫ Warp Firmware Version 10.1.2 Update r60p32

Fatpipeinc ≫ Warp Version -

Fatpipeinc ≫ Warp Firmware Version 10.1.2 Update r60p35

Fatpipeinc ≫ Warp Version -

Fatpipeinc ≫ Warp Firmware Version 10.1.2 Update r60p45

Fatpipeinc ≫ Warp Version -

Fatpipeinc ≫ Warp Firmware Version 10.1.2 Update r60p55

Fatpipeinc ≫ Warp Version -

Fatpipeinc ≫ Warp Firmware Version 10.1.2 Update r60p58

Fatpipeinc ≫ Warp Version -

Fatpipeinc ≫ Warp Firmware Version 10.1.2 Update r60p58s1

Fatpipeinc ≫ Warp Version -

Fatpipeinc ≫ Warp Firmware Version 10.1.2 Update r60p65

Fatpipeinc ≫ Warp Version -

Fatpipeinc ≫ Warp Firmware Version 10.1.2 Update r60p71

Fatpipeinc ≫ Warp Version -

Fatpipeinc ≫ Warp Firmware Version 10.1.2 Update r60p82

Fatpipeinc ≫ Warp Version -

Fatpipeinc ≫ Warp Firmware Version 10.2.2 Update r10

Fatpipeinc ≫ Warp Version -

Fatpipeinc ≫ Warp Firmware Version 10.2.2 Update r25

Fatpipeinc ≫ Warp Version -

Fatpipeinc ≫ Warp Firmware Version 10.2.2 Update r38

Fatpipeinc ≫ Warp Version -

Fatpipeinc ≫ Mpvpn Firmware Version 5.2.0 Update r34

Fatpipeinc ≫ Mpvpn Version -

Fatpipeinc ≫ Mpvpn Firmware Version 6.1.2 Update r70p26

Fatpipeinc ≫ Mpvpn Version -

Fatpipeinc ≫ Mpvpn Firmware Version 6.1.2 Update r70p45-m

Fatpipeinc ≫ Mpvpn Version -

Fatpipeinc ≫ Mpvpn Firmware Version 6.1.2 Update r70p75-m

Fatpipeinc ≫ Mpvpn Version -

Fatpipeinc ≫ Mpvpn Firmware Version 7.1.2 Update r39

Fatpipeinc ≫ Mpvpn Version -

Fatpipeinc ≫ Mpvpn Firmware Version 9.1.2 Update r129

Fatpipeinc ≫ Mpvpn Version -

Fatpipeinc ≫ Mpvpn Firmware Version 9.1.2 Update r144

Fatpipeinc ≫ Mpvpn Version -

Fatpipeinc ≫ Mpvpn Firmware Version 9.1.2 Update r150

Fatpipeinc ≫ Mpvpn Version -

Fatpipeinc ≫ Mpvpn Firmware Version 9.1.2 Update r156

Fatpipeinc ≫ Mpvpn Version -

Fatpipeinc ≫ Mpvpn Firmware Version 9.1.2 Update r161p12

Fatpipeinc ≫ Mpvpn Version -

Fatpipeinc ≫ Mpvpn Firmware Version 9.1.2 Update r161p16

Fatpipeinc ≫ Mpvpn Version -

Fatpipeinc ≫ Mpvpn Firmware Version 9.1.2 Update r161p17

Fatpipeinc ≫ Mpvpn Version -

Fatpipeinc ≫ Mpvpn Firmware Version 9.1.2 Update r161p2

Fatpipeinc ≫ Mpvpn Version -

Fatpipeinc ≫ Mpvpn Firmware Version 9.1.2 Update r161p20

Fatpipeinc ≫ Mpvpn Version -

Fatpipeinc ≫ Mpvpn Firmware Version 9.1.2 Update r161p26

Fatpipeinc ≫ Mpvpn Version -

Fatpipeinc ≫ Mpvpn Firmware Version 9.1.2 Update r161p3

Fatpipeinc ≫ Mpvpn Version -

Fatpipeinc ≫ Mpvpn Firmware Version 9.1.2 Update r164

Fatpipeinc ≫ Mpvpn Version -

Fatpipeinc ≫ Mpvpn Firmware Version 9.1.2 Update r164p4

Fatpipeinc ≫ Mpvpn Version -

Fatpipeinc ≫ Mpvpn Firmware Version 9.1.2 Update r164p5

Fatpipeinc ≫ Mpvpn Version -

Fatpipeinc ≫ Mpvpn Firmware Version 9.1.2 Update r165

Fatpipeinc ≫ Mpvpn Version -

Fatpipeinc ≫ Mpvpn Firmware Version 9.1.2 Update r180p2

Fatpipeinc ≫ Mpvpn Version -

Fatpipeinc ≫ Mpvpn Firmware Version 9.1.2 Update r185

Fatpipeinc ≫ Mpvpn Version -

Fatpipeinc ≫ Mpvpn Firmware Version 10.1.2 Update r60p10

Fatpipeinc ≫ Mpvpn Version -

Fatpipeinc ≫ Mpvpn Firmware Version 10.1.2 Update r60p13

Fatpipeinc ≫ Mpvpn Version -

Fatpipeinc ≫ Mpvpn Firmware Version 10.1.2 Update r60p32

Fatpipeinc ≫ Mpvpn Version -

Fatpipeinc ≫ Mpvpn Firmware Version 10.1.2 Update r60p35

Fatpipeinc ≫ Mpvpn Version -

Fatpipeinc ≫ Mpvpn Firmware Version 10.1.2 Update r60p45

Fatpipeinc ≫ Mpvpn Version -

Fatpipeinc ≫ Mpvpn Firmware Version 10.1.2 Update r60p55

Fatpipeinc ≫ Mpvpn Version -

Fatpipeinc ≫ Mpvpn Firmware Version 10.1.2 Update r60p58

Fatpipeinc ≫ Mpvpn Version -

Fatpipeinc ≫ Mpvpn Firmware Version 10.1.2 Update r60p58s1

Fatpipeinc ≫ Mpvpn Version -

Fatpipeinc ≫ Mpvpn Firmware Version 10.1.2 Update r60p65

Fatpipeinc ≫ Mpvpn Version -

Fatpipeinc ≫ Mpvpn Firmware Version 10.1.2 Update r60p71

Fatpipeinc ≫ Mpvpn Version -

Fatpipeinc ≫ Mpvpn Firmware Version 10.1.2 Update r60p82

Fatpipeinc ≫ Mpvpn Version -

Fatpipeinc ≫ Mpvpn Firmware Version 10.2.2 Update r10

Fatpipeinc ≫ Mpvpn Version -

Fatpipeinc ≫ Mpvpn Firmware Version 10.2.2 Update r25

Fatpipeinc ≫ Mpvpn Version -

Fatpipeinc ≫ Mpvpn Firmware Version 10.2.2 Update r38

Fatpipeinc ≫ Mpvpn Version -

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.6%	0.727

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	8.8	2.8	5.9	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NIST	6.5	8	6.4	AV:N/AC:L/Au:S/C:P/I:P/A:P
CERT.org	8.8	2.8	5.9	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-862 Missing Authorization

The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

https://www.fatpipeinc.com/support/cve-list.php

Vendor Advisory

https://www.zeroscience.mk/codes/fatpipe_privesc.txt

Third Party Advisory

https://www.zeroscience.mk/en/vulnerabilities/ZSL-2021-5685.php

Third Party Advisory

https://nvd.nist.gov/vuln/detail/CVE-2021-27855

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2021-27855

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2021-27855

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2021-27855