9.8

CVE-2021-27856

FatPipe software administrative account with no password

FatPipe WARP, IPVPN, and MPVPN software prior to versions 10.1.2r60p91 and 10.2.2r42 includes an account named "cmuser" that has administrative privileges and no password. Older versions of FatPipe software may also be vulnerable. The FatPipe advisory identifier for this vulnerability is FPSA002.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Fatpipeinc ≫ Ipvpn Firmware Version 5.2.0 Update r34
   Fatpipeinc ≫ Ipvpn Version -
Fatpipeinc ≫ Ipvpn Firmware Version 6.1.2 Update r70p26
   Fatpipeinc ≫ Ipvpn Version -
Fatpipeinc ≫ Ipvpn Firmware Version 6.1.2 Update r70p45-m
   Fatpipeinc ≫ Ipvpn Version -
Fatpipeinc ≫ Ipvpn Firmware Version 6.1.2 Update r70p75-m
   Fatpipeinc ≫ Ipvpn Version -
Fatpipeinc ≫ Ipvpn Firmware Version 7.1.2 Update r39
   Fatpipeinc ≫ Ipvpn Version -
Fatpipeinc ≫ Ipvpn Firmware Version 9.1.2 Update r129
   Fatpipeinc ≫ Ipvpn Version -
Fatpipeinc ≫ Ipvpn Firmware Version 9.1.2 Update r144
   Fatpipeinc ≫ Ipvpn Version -
Fatpipeinc ≫ Ipvpn Firmware Version 9.1.2 Update r150
   Fatpipeinc ≫ Ipvpn Version -
Fatpipeinc ≫ Ipvpn Firmware Version 9.1.2 Update r156
   Fatpipeinc ≫ Ipvpn Version -
Fatpipeinc ≫ Ipvpn Firmware Version 9.1.2 Update r161p12
   Fatpipeinc ≫ Ipvpn Version -
Fatpipeinc ≫ Ipvpn Firmware Version 9.1.2 Update r161p16
   Fatpipeinc ≫ Ipvpn Version -
Fatpipeinc ≫ Ipvpn Firmware Version 9.1.2 Update r161p17
   Fatpipeinc ≫ Ipvpn Version -
Fatpipeinc ≫ Ipvpn Firmware Version 9.1.2 Update r161p2
   Fatpipeinc ≫ Ipvpn Version -
Fatpipeinc ≫ Ipvpn Firmware Version 9.1.2 Update r161p20
   Fatpipeinc ≫ Ipvpn Version -
Fatpipeinc ≫ Ipvpn Firmware Version 9.1.2 Update r161p26
   Fatpipeinc ≫ Ipvpn Version -
Fatpipeinc ≫ Ipvpn Firmware Version 9.1.2 Update r161p3
   Fatpipeinc ≫ Ipvpn Version -
Fatpipeinc ≫ Ipvpn Firmware Version 9.1.2 Update r164
   Fatpipeinc ≫ Ipvpn Version -
Fatpipeinc ≫ Ipvpn Firmware Version 9.1.2 Update r164p4
   Fatpipeinc ≫ Ipvpn Version -
Fatpipeinc ≫ Ipvpn Firmware Version 9.1.2 Update r164p5
   Fatpipeinc ≫ Ipvpn Version -
Fatpipeinc ≫ Ipvpn Firmware Version 9.1.2 Update r165
   Fatpipeinc ≫ Ipvpn Version -
Fatpipeinc ≫ Ipvpn Firmware Version 9.1.2 Update r180p2
   Fatpipeinc ≫ Ipvpn Version -
Fatpipeinc ≫ Ipvpn Firmware Version 9.1.2 Update r185
   Fatpipeinc ≫ Ipvpn Version -
Fatpipeinc ≫ Ipvpn Firmware Version 10.1.2 Update r60p10
   Fatpipeinc ≫ Ipvpn Version -
Fatpipeinc ≫ Ipvpn Firmware Version 10.1.2 Update r60p13
   Fatpipeinc ≫ Ipvpn Version -
Fatpipeinc ≫ Ipvpn Firmware Version 10.1.2 Update r60p32
   Fatpipeinc ≫ Ipvpn Version -
Fatpipeinc ≫ Ipvpn Firmware Version 10.1.2 Update r60p35
   Fatpipeinc ≫ Ipvpn Version -
Fatpipeinc ≫ Ipvpn Firmware Version 10.1.2 Update r60p45
   Fatpipeinc ≫ Ipvpn Version -
Fatpipeinc ≫ Ipvpn Firmware Version 10.1.2 Update r60p55
   Fatpipeinc ≫ Ipvpn Version -
Fatpipeinc ≫ Ipvpn Firmware Version 10.1.2 Update r60p58
   Fatpipeinc ≫ Ipvpn Version -
Fatpipeinc ≫ Ipvpn Firmware Version 10.1.2 Update r60p58s1
   Fatpipeinc ≫ Ipvpn Version -
Fatpipeinc ≫ Ipvpn Firmware Version 10.1.2 Update r60p65
   Fatpipeinc ≫ Ipvpn Version -
Fatpipeinc ≫ Ipvpn Firmware Version 10.1.2 Update r60p71
   Fatpipeinc ≫ Ipvpn Version -
Fatpipeinc ≫ Ipvpn Firmware Version 10.1.2 Update r60p82
   Fatpipeinc ≫ Ipvpn Version -
Fatpipeinc ≫ Ipvpn Firmware Version 10.2.2 Update r10
   Fatpipeinc ≫ Ipvpn Version -
Fatpipeinc ≫ Ipvpn Firmware Version 10.2.2 Update r25
   Fatpipeinc ≫ Ipvpn Version -
Fatpipeinc ≫ Ipvpn Firmware Version 10.2.2 Update r38
   Fatpipeinc ≫ Ipvpn Version -
Fatpipeinc ≫ Mpvpn Firmware Version 5.2.0 Update r34
   Fatpipeinc ≫ Mpvpn Version -
Fatpipeinc ≫ Mpvpn Firmware Version 6.1.2 Update r70p26
   Fatpipeinc ≫ Mpvpn Version -
Fatpipeinc ≫ Mpvpn Firmware Version 6.1.2 Update r70p45-m
   Fatpipeinc ≫ Mpvpn Version -
Fatpipeinc ≫ Mpvpn Firmware Version 6.1.2 Update r70p75-m
   Fatpipeinc ≫ Mpvpn Version -
Fatpipeinc ≫ Mpvpn Firmware Version 7.1.2 Update r39
   Fatpipeinc ≫ Mpvpn Version -
Fatpipeinc ≫ Mpvpn Firmware Version 9.1.2 Update r129
   Fatpipeinc ≫ Mpvpn Version -
Fatpipeinc ≫ Mpvpn Firmware Version 9.1.2 Update r144
   Fatpipeinc ≫ Mpvpn Version -
Fatpipeinc ≫ Mpvpn Firmware Version 9.1.2 Update r150
   Fatpipeinc ≫ Mpvpn Version -
Fatpipeinc ≫ Mpvpn Firmware Version 9.1.2 Update r156
   Fatpipeinc ≫ Mpvpn Version -
Fatpipeinc ≫ Mpvpn Firmware Version 9.1.2 Update r161p12
   Fatpipeinc ≫ Mpvpn Version -
Fatpipeinc ≫ Mpvpn Firmware Version 9.1.2 Update r161p16
   Fatpipeinc ≫ Mpvpn Version -
Fatpipeinc ≫ Mpvpn Firmware Version 9.1.2 Update r161p17
   Fatpipeinc ≫ Mpvpn Version -
Fatpipeinc ≫ Mpvpn Firmware Version 9.1.2 Update r161p2
   Fatpipeinc ≫ Mpvpn Version -
Fatpipeinc ≫ Mpvpn Firmware Version 9.1.2 Update r161p20
   Fatpipeinc ≫ Mpvpn Version -
Fatpipeinc ≫ Mpvpn Firmware Version 9.1.2 Update r161p26
   Fatpipeinc ≫ Mpvpn Version -
Fatpipeinc ≫ Mpvpn Firmware Version 9.1.2 Update r161p3
   Fatpipeinc ≫ Mpvpn Version -
Fatpipeinc ≫ Mpvpn Firmware Version 9.1.2 Update r164
   Fatpipeinc ≫ Mpvpn Version -
Fatpipeinc ≫ Mpvpn Firmware Version 9.1.2 Update r164p4
   Fatpipeinc ≫ Mpvpn Version -
Fatpipeinc ≫ Mpvpn Firmware Version 9.1.2 Update r164p5
   Fatpipeinc ≫ Mpvpn Version -
Fatpipeinc ≫ Mpvpn Firmware Version 9.1.2 Update r165
   Fatpipeinc ≫ Mpvpn Version -
Fatpipeinc ≫ Mpvpn Firmware Version 9.1.2 Update r180p2
   Fatpipeinc ≫ Mpvpn Version -
Fatpipeinc ≫ Mpvpn Firmware Version 9.1.2 Update r185
   Fatpipeinc ≫ Mpvpn Version -
Fatpipeinc ≫ Mpvpn Firmware Version 10.1.2 Update r60p10
   Fatpipeinc ≫ Mpvpn Version -
Fatpipeinc ≫ Mpvpn Firmware Version 10.1.2 Update r60p13
   Fatpipeinc ≫ Mpvpn Version -
Fatpipeinc ≫ Mpvpn Firmware Version 10.1.2 Update r60p32
   Fatpipeinc ≫ Mpvpn Version -
Fatpipeinc ≫ Mpvpn Firmware Version 10.1.2 Update r60p35
   Fatpipeinc ≫ Mpvpn Version -
Fatpipeinc ≫ Mpvpn Firmware Version 10.1.2 Update r60p45
   Fatpipeinc ≫ Mpvpn Version -
Fatpipeinc ≫ Mpvpn Firmware Version 10.1.2 Update r60p55
   Fatpipeinc ≫ Mpvpn Version -
Fatpipeinc ≫ Mpvpn Firmware Version 10.1.2 Update r60p58
   Fatpipeinc ≫ Mpvpn Version -
Fatpipeinc ≫ Mpvpn Firmware Version 10.1.2 Update r60p58s1
   Fatpipeinc ≫ Mpvpn Version -
Fatpipeinc ≫ Mpvpn Firmware Version 10.1.2 Update r60p65
   Fatpipeinc ≫ Mpvpn Version -
Fatpipeinc ≫ Mpvpn Firmware Version 10.1.2 Update r60p71
   Fatpipeinc ≫ Mpvpn Version -
Fatpipeinc ≫ Mpvpn Firmware Version 10.1.2 Update r60p82
   Fatpipeinc ≫ Mpvpn Version -
Fatpipeinc ≫ Mpvpn Firmware Version 10.2.2 Update r10
   Fatpipeinc ≫ Mpvpn Version -
Fatpipeinc ≫ Mpvpn Firmware Version 10.2.2 Update r25
   Fatpipeinc ≫ Mpvpn Version -
Fatpipeinc ≫ Mpvpn Firmware Version 10.2.2 Update r38
   Fatpipeinc ≫ Mpvpn Version -
Fatpipeinc ≫ Warp Firmware Version 5.2.0 Update r34
   Fatpipeinc ≫ Warp Version -
Fatpipeinc ≫ Warp Firmware Version 6.1.2 Update r70p26
   Fatpipeinc ≫ Warp Version -
Fatpipeinc ≫ Warp Firmware Version 6.1.2 Update r70p45-m
   Fatpipeinc ≫ Warp Version -
Fatpipeinc ≫ Warp Firmware Version 6.1.2 Update r70p75-m
   Fatpipeinc ≫ Warp Version -
Fatpipeinc ≫ Warp Firmware Version 7.1.2 Update r39
   Fatpipeinc ≫ Warp Version -
Fatpipeinc ≫ Warp Firmware Version 9.1.2 Update r129
   Fatpipeinc ≫ Warp Version -
Fatpipeinc ≫ Warp Firmware Version 9.1.2 Update r144
   Fatpipeinc ≫ Warp Version -
Fatpipeinc ≫ Warp Firmware Version 9.1.2 Update r150
   Fatpipeinc ≫ Warp Version -
Fatpipeinc ≫ Warp Firmware Version 9.1.2 Update r156
   Fatpipeinc ≫ Warp Version -
Fatpipeinc ≫ Warp Firmware Version 9.1.2 Update r161p12
   Fatpipeinc ≫ Warp Version -
Fatpipeinc ≫ Warp Firmware Version 9.1.2 Update r161p16
   Fatpipeinc ≫ Warp Version -
Fatpipeinc ≫ Warp Firmware Version 9.1.2 Update r161p17
   Fatpipeinc ≫ Warp Version -
Fatpipeinc ≫ Warp Firmware Version 9.1.2 Update r161p2
   Fatpipeinc ≫ Warp Version -
Fatpipeinc ≫ Warp Firmware Version 9.1.2 Update r161p20
   Fatpipeinc ≫ Warp Version -
Fatpipeinc ≫ Warp Firmware Version 9.1.2 Update r161p26
   Fatpipeinc ≫ Warp Version -
Fatpipeinc ≫ Warp Firmware Version 9.1.2 Update r161p3
   Fatpipeinc ≫ Warp Version -
Fatpipeinc ≫ Warp Firmware Version 9.1.2 Update r164
   Fatpipeinc ≫ Warp Version -
Fatpipeinc ≫ Warp Firmware Version 9.1.2 Update r164p4
   Fatpipeinc ≫ Warp Version -
Fatpipeinc ≫ Warp Firmware Version 9.1.2 Update r164p5
   Fatpipeinc ≫ Warp Version -
Fatpipeinc ≫ Warp Firmware Version 9.1.2 Update r165
   Fatpipeinc ≫ Warp Version -
Fatpipeinc ≫ Warp Firmware Version 9.1.2 Update r180p2
   Fatpipeinc ≫ Warp Version -
Fatpipeinc ≫ Warp Firmware Version 9.1.2 Update r185
   Fatpipeinc ≫ Warp Version -
Fatpipeinc ≫ Warp Firmware Version 10.1.2 Update r60p10
   Fatpipeinc ≫ Warp Version -
Fatpipeinc ≫ Warp Firmware Version 10.1.2 Update r60p13
   Fatpipeinc ≫ Warp Version -
Fatpipeinc ≫ Warp Firmware Version 10.1.2 Update r60p32
   Fatpipeinc ≫ Warp Version -
Fatpipeinc ≫ Warp Firmware Version 10.1.2 Update r60p35
   Fatpipeinc ≫ Warp Version -
Fatpipeinc ≫ Warp Firmware Version 10.1.2 Update r60p45
   Fatpipeinc ≫ Warp Version -
Fatpipeinc ≫ Warp Firmware Version 10.1.2 Update r60p55
   Fatpipeinc ≫ Warp Version -
Fatpipeinc ≫ Warp Firmware Version 10.1.2 Update r60p58
   Fatpipeinc ≫ Warp Version -
Fatpipeinc ≫ Warp Firmware Version 10.1.2 Update r60p58s1
   Fatpipeinc ≫ Warp Version -
Fatpipeinc ≫ Warp Firmware Version 10.1.2 Update r60p65
   Fatpipeinc ≫ Warp Version -
Fatpipeinc ≫ Warp Firmware Version 10.1.2 Update r60p71
   Fatpipeinc ≫ Warp Version -
Fatpipeinc ≫ Warp Firmware Version 10.1.2 Update r60p82
   Fatpipeinc ≫ Warp Version -
Fatpipeinc ≫ Warp Firmware Version 10.2.2 Update r10
   Fatpipeinc ≫ Warp Version -
Fatpipeinc ≫ Warp Firmware Version 10.2.2 Update r25
   Fatpipeinc ≫ Warp Version -
Fatpipeinc ≫ Warp Firmware Version 10.2.2 Update r38
   Fatpipeinc ≫ Warp Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 5.6% 0.919
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NIST 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
CERT.org 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://www.fatpipeinc.com/support/cve-list.php
Vendor Advisory
https://www.zeroscience.mk/codes/fatpipe_backdoor.txt
Third Party Advisory
https://www.zeroscience.mk/en/vulnerabilities/ZSL-2021-5684.php
Third Party Advisory