8.8

CVE-2021-27859

Missing authorization vulnerability in FatPipe software

A missing authorization vulnerability in the web management interface of FatPipe WARP, IPVPN, and MPVPN software prior to versions 10.1.2r60p91 and 10.2.2r42 allows an authenticated, remote attacker with read-only privileges to create an account with administrative privileges. Older versions of FatPipe software may also be vulnerable. This does not appear to be a CSRF vulnerability. The FatPipe advisory identifier for this vulnerability is FPSA005.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Fatpipeinc ≫ Ipvpn Firmware Version 5.2.0 Update r34
   Fatpipeinc ≫ Ipvpn Version -
Fatpipeinc ≫ Ipvpn Firmware Version 6.1.2 Update r70p26
   Fatpipeinc ≫ Ipvpn Version -
Fatpipeinc ≫ Ipvpn Firmware Version 6.1.2 Update r70p45-m
   Fatpipeinc ≫ Ipvpn Version -
Fatpipeinc ≫ Ipvpn Firmware Version 6.1.2 Update r70p75-m
   Fatpipeinc ≫ Ipvpn Version -
Fatpipeinc ≫ Ipvpn Firmware Version 7.1.2 Update r39
   Fatpipeinc ≫ Ipvpn Version -
Fatpipeinc ≫ Ipvpn Firmware Version 9.1.2 Update r129
   Fatpipeinc ≫ Ipvpn Version -
Fatpipeinc ≫ Ipvpn Firmware Version 9.1.2 Update r144
   Fatpipeinc ≫ Ipvpn Version -
Fatpipeinc ≫ Ipvpn Firmware Version 9.1.2 Update r150
   Fatpipeinc ≫ Ipvpn Version -
Fatpipeinc ≫ Ipvpn Firmware Version 9.1.2 Update r156
   Fatpipeinc ≫ Ipvpn Version -
Fatpipeinc ≫ Ipvpn Firmware Version 9.1.2 Update r161p12
   Fatpipeinc ≫ Ipvpn Version -
Fatpipeinc ≫ Ipvpn Firmware Version 9.1.2 Update r161p16
   Fatpipeinc ≫ Ipvpn Version -
Fatpipeinc ≫ Ipvpn Firmware Version 9.1.2 Update r161p17
   Fatpipeinc ≫ Ipvpn Version -
Fatpipeinc ≫ Ipvpn Firmware Version 9.1.2 Update r161p2
   Fatpipeinc ≫ Ipvpn Version -
Fatpipeinc ≫ Ipvpn Firmware Version 9.1.2 Update r161p20
   Fatpipeinc ≫ Ipvpn Version -
Fatpipeinc ≫ Ipvpn Firmware Version 9.1.2 Update r161p26
   Fatpipeinc ≫ Ipvpn Version -
Fatpipeinc ≫ Ipvpn Firmware Version 9.1.2 Update r161p3
   Fatpipeinc ≫ Ipvpn Version -
Fatpipeinc ≫ Ipvpn Firmware Version 9.1.2 Update r164
   Fatpipeinc ≫ Ipvpn Version -
Fatpipeinc ≫ Ipvpn Firmware Version 9.1.2 Update r164p4
   Fatpipeinc ≫ Ipvpn Version -
Fatpipeinc ≫ Ipvpn Firmware Version 9.1.2 Update r164p5
   Fatpipeinc ≫ Ipvpn Version -
Fatpipeinc ≫ Ipvpn Firmware Version 9.1.2 Update r165
   Fatpipeinc ≫ Ipvpn Version -
Fatpipeinc ≫ Ipvpn Firmware Version 9.1.2 Update r180p2
   Fatpipeinc ≫ Ipvpn Version -
Fatpipeinc ≫ Ipvpn Firmware Version 9.1.2 Update r185
   Fatpipeinc ≫ Ipvpn Version -
Fatpipeinc ≫ Ipvpn Firmware Version 10.1.2 Update r60p10
   Fatpipeinc ≫ Ipvpn Version -
Fatpipeinc ≫ Ipvpn Firmware Version 10.1.2 Update r60p13
   Fatpipeinc ≫ Ipvpn Version -
Fatpipeinc ≫ Ipvpn Firmware Version 10.1.2 Update r60p32
   Fatpipeinc ≫ Ipvpn Version -
Fatpipeinc ≫ Ipvpn Firmware Version 10.1.2 Update r60p35
   Fatpipeinc ≫ Ipvpn Version -
Fatpipeinc ≫ Ipvpn Firmware Version 10.1.2 Update r60p45
   Fatpipeinc ≫ Ipvpn Version -
Fatpipeinc ≫ Ipvpn Firmware Version 10.1.2 Update r60p55
   Fatpipeinc ≫ Ipvpn Version -
Fatpipeinc ≫ Ipvpn Firmware Version 10.1.2 Update r60p58
   Fatpipeinc ≫ Ipvpn Version -
Fatpipeinc ≫ Ipvpn Firmware Version 10.1.2 Update r60p58s1
   Fatpipeinc ≫ Ipvpn Version -
Fatpipeinc ≫ Ipvpn Firmware Version 10.1.2 Update r60p65
   Fatpipeinc ≫ Ipvpn Version -
Fatpipeinc ≫ Ipvpn Firmware Version 10.1.2 Update r60p71
   Fatpipeinc ≫ Ipvpn Version -
Fatpipeinc ≫ Ipvpn Firmware Version 10.1.2 Update r60p82
   Fatpipeinc ≫ Ipvpn Version -
Fatpipeinc ≫ Ipvpn Firmware Version 10.2.2 Update r10
   Fatpipeinc ≫ Ipvpn Version -
Fatpipeinc ≫ Ipvpn Firmware Version 10.2.2 Update r25
   Fatpipeinc ≫ Ipvpn Version -
Fatpipeinc ≫ Ipvpn Firmware Version 10.2.2 Update r38
   Fatpipeinc ≫ Ipvpn Version -
Fatpipeinc ≫ Mpvpn Firmware Version 5.2.0 Update r34
   Fatpipeinc ≫ Mpvpn Version -
Fatpipeinc ≫ Mpvpn Firmware Version 6.1.2 Update r70p26
   Fatpipeinc ≫ Mpvpn Version -
Fatpipeinc ≫ Mpvpn Firmware Version 6.1.2 Update r70p45-m
   Fatpipeinc ≫ Mpvpn Version -
Fatpipeinc ≫ Mpvpn Firmware Version 6.1.2 Update r70p75-m
   Fatpipeinc ≫ Mpvpn Version -
Fatpipeinc ≫ Mpvpn Firmware Version 7.1.2 Update r39
   Fatpipeinc ≫ Mpvpn Version -
Fatpipeinc ≫ Mpvpn Firmware Version 9.1.2 Update r129
   Fatpipeinc ≫ Mpvpn Version -
Fatpipeinc ≫ Mpvpn Firmware Version 9.1.2 Update r144
   Fatpipeinc ≫ Mpvpn Version -
Fatpipeinc ≫ Mpvpn Firmware Version 9.1.2 Update r150
   Fatpipeinc ≫ Mpvpn Version -
Fatpipeinc ≫ Mpvpn Firmware Version 9.1.2 Update r156
   Fatpipeinc ≫ Mpvpn Version -
Fatpipeinc ≫ Mpvpn Firmware Version 9.1.2 Update r161p12
   Fatpipeinc ≫ Mpvpn Version -
Fatpipeinc ≫ Mpvpn Firmware Version 9.1.2 Update r161p16
   Fatpipeinc ≫ Mpvpn Version -
Fatpipeinc ≫ Mpvpn Firmware Version 9.1.2 Update r161p17
   Fatpipeinc ≫ Mpvpn Version -
Fatpipeinc ≫ Mpvpn Firmware Version 9.1.2 Update r161p2
   Fatpipeinc ≫ Mpvpn Version -
Fatpipeinc ≫ Mpvpn Firmware Version 9.1.2 Update r161p20
   Fatpipeinc ≫ Mpvpn Version -
Fatpipeinc ≫ Mpvpn Firmware Version 9.1.2 Update r161p26
   Fatpipeinc ≫ Mpvpn Version -
Fatpipeinc ≫ Mpvpn Firmware Version 9.1.2 Update r161p3
   Fatpipeinc ≫ Mpvpn Version -
Fatpipeinc ≫ Mpvpn Firmware Version 9.1.2 Update r164
   Fatpipeinc ≫ Mpvpn Version -
Fatpipeinc ≫ Mpvpn Firmware Version 9.1.2 Update r164p4
   Fatpipeinc ≫ Mpvpn Version -
Fatpipeinc ≫ Mpvpn Firmware Version 9.1.2 Update r164p5
   Fatpipeinc ≫ Mpvpn Version -
Fatpipeinc ≫ Mpvpn Firmware Version 9.1.2 Update r165
   Fatpipeinc ≫ Mpvpn Version -
Fatpipeinc ≫ Mpvpn Firmware Version 9.1.2 Update r180p2
   Fatpipeinc ≫ Mpvpn Version -
Fatpipeinc ≫ Mpvpn Firmware Version 9.1.2 Update r185
   Fatpipeinc ≫ Mpvpn Version -
Fatpipeinc ≫ Mpvpn Firmware Version 10.1.2 Update r60p10
   Fatpipeinc ≫ Mpvpn Version -
Fatpipeinc ≫ Mpvpn Firmware Version 10.1.2 Update r60p13
   Fatpipeinc ≫ Mpvpn Version -
Fatpipeinc ≫ Mpvpn Firmware Version 10.1.2 Update r60p32
   Fatpipeinc ≫ Mpvpn Version -
Fatpipeinc ≫ Mpvpn Firmware Version 10.1.2 Update r60p35
   Fatpipeinc ≫ Mpvpn Version -
Fatpipeinc ≫ Mpvpn Firmware Version 10.1.2 Update r60p45
   Fatpipeinc ≫ Mpvpn Version -
Fatpipeinc ≫ Mpvpn Firmware Version 10.1.2 Update r60p55
   Fatpipeinc ≫ Mpvpn Version -
Fatpipeinc ≫ Mpvpn Firmware Version 10.1.2 Update r60p58
   Fatpipeinc ≫ Mpvpn Version -
Fatpipeinc ≫ Mpvpn Firmware Version 10.1.2 Update r60p58s1
   Fatpipeinc ≫ Mpvpn Version -
Fatpipeinc ≫ Mpvpn Firmware Version 10.1.2 Update r60p65
   Fatpipeinc ≫ Mpvpn Version -
Fatpipeinc ≫ Mpvpn Firmware Version 10.1.2 Update r60p71
   Fatpipeinc ≫ Mpvpn Version -
Fatpipeinc ≫ Mpvpn Firmware Version 10.1.2 Update r60p82
   Fatpipeinc ≫ Mpvpn Version -
Fatpipeinc ≫ Mpvpn Firmware Version 10.2.2 Update r10
   Fatpipeinc ≫ Mpvpn Version -
Fatpipeinc ≫ Mpvpn Firmware Version 10.2.2 Update r25
   Fatpipeinc ≫ Mpvpn Version -
Fatpipeinc ≫ Mpvpn Firmware Version 10.2.2 Update r38
   Fatpipeinc ≫ Mpvpn Version -
Fatpipeinc ≫ Warp Firmware Version 5.2.0 Update r34
   Fatpipeinc ≫ Warp Version -
Fatpipeinc ≫ Warp Firmware Version 6.1.2 Update r70p26
   Fatpipeinc ≫ Warp Version -
Fatpipeinc ≫ Warp Firmware Version 6.1.2 Update r70p45-m
   Fatpipeinc ≫ Warp Version -
Fatpipeinc ≫ Warp Firmware Version 6.1.2 Update r70p75-m
   Fatpipeinc ≫ Warp Version -
Fatpipeinc ≫ Warp Firmware Version 7.1.2 Update r39
   Fatpipeinc ≫ Warp Version -
Fatpipeinc ≫ Warp Firmware Version 9.1.2 Update r129
   Fatpipeinc ≫ Warp Version -
Fatpipeinc ≫ Warp Firmware Version 9.1.2 Update r144
   Fatpipeinc ≫ Warp Version -
Fatpipeinc ≫ Warp Firmware Version 9.1.2 Update r150
   Fatpipeinc ≫ Warp Version -
Fatpipeinc ≫ Warp Firmware Version 9.1.2 Update r156
   Fatpipeinc ≫ Warp Version -
Fatpipeinc ≫ Warp Firmware Version 9.1.2 Update r161p12
   Fatpipeinc ≫ Warp Version -
Fatpipeinc ≫ Warp Firmware Version 9.1.2 Update r161p16
   Fatpipeinc ≫ Warp Version -
Fatpipeinc ≫ Warp Firmware Version 9.1.2 Update r161p17
   Fatpipeinc ≫ Warp Version -
Fatpipeinc ≫ Warp Firmware Version 9.1.2 Update r161p2
   Fatpipeinc ≫ Warp Version -
Fatpipeinc ≫ Warp Firmware Version 9.1.2 Update r161p20
   Fatpipeinc ≫ Warp Version -
Fatpipeinc ≫ Warp Firmware Version 9.1.2 Update r161p26
   Fatpipeinc ≫ Warp Version -
Fatpipeinc ≫ Warp Firmware Version 9.1.2 Update r161p3
   Fatpipeinc ≫ Warp Version -
Fatpipeinc ≫ Warp Firmware Version 9.1.2 Update r164
   Fatpipeinc ≫ Warp Version -
Fatpipeinc ≫ Warp Firmware Version 9.1.2 Update r164p4
   Fatpipeinc ≫ Warp Version -
Fatpipeinc ≫ Warp Firmware Version 9.1.2 Update r164p5
   Fatpipeinc ≫ Warp Version -
Fatpipeinc ≫ Warp Firmware Version 9.1.2 Update r165
   Fatpipeinc ≫ Warp Version -
Fatpipeinc ≫ Warp Firmware Version 9.1.2 Update r180p2
   Fatpipeinc ≫ Warp Version -
Fatpipeinc ≫ Warp Firmware Version 9.1.2 Update r185
   Fatpipeinc ≫ Warp Version -
Fatpipeinc ≫ Warp Firmware Version 10.1.2 Update r60p10
   Fatpipeinc ≫ Warp Version -
Fatpipeinc ≫ Warp Firmware Version 10.1.2 Update r60p13
   Fatpipeinc ≫ Warp Version -
Fatpipeinc ≫ Warp Firmware Version 10.1.2 Update r60p32
   Fatpipeinc ≫ Warp Version -
Fatpipeinc ≫ Warp Firmware Version 10.1.2 Update r60p35
   Fatpipeinc ≫ Warp Version -
Fatpipeinc ≫ Warp Firmware Version 10.1.2 Update r60p45
   Fatpipeinc ≫ Warp Version -
Fatpipeinc ≫ Warp Firmware Version 10.1.2 Update r60p55
   Fatpipeinc ≫ Warp Version -
Fatpipeinc ≫ Warp Firmware Version 10.1.2 Update r60p58
   Fatpipeinc ≫ Warp Version -
Fatpipeinc ≫ Warp Firmware Version 10.1.2 Update r60p58s1
   Fatpipeinc ≫ Warp Version -
Fatpipeinc ≫ Warp Firmware Version 10.1.2 Update r60p65
   Fatpipeinc ≫ Warp Version -
Fatpipeinc ≫ Warp Firmware Version 10.1.2 Update r60p71
   Fatpipeinc ≫ Warp Version -
Fatpipeinc ≫ Warp Firmware Version 10.1.2 Update r60p82
   Fatpipeinc ≫ Warp Version -
Fatpipeinc ≫ Warp Firmware Version 10.2.2 Update r10
   Fatpipeinc ≫ Warp Version -
Fatpipeinc ≫ Warp Firmware Version 10.2.2 Update r25
   Fatpipeinc ≫ Warp Version -
Fatpipeinc ≫ Warp Firmware Version 10.2.2 Update r38
   Fatpipeinc ≫ Warp Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.62% 0.729
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 8.8 2.8 5.9
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NIST 6.5 8 6.4
AV:N/AC:L/Au:S/C:P/I:P/A:P
CERT.org 8.8 2.8 5.9
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-862 Missing Authorization

The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

https://www.fatpipeinc.com/support/cve-list.php
Vendor Advisory
https://www.zeroscience.mk/codes/fatpipe_csrf.txt
Third Party Advisory
https://www.zeroscience.mk/en/vulnerabilities/ZSL-2021-5681.php
Third Party Advisory