9.3
CVE-2021-27860
- EPSS 39.82%
- Veröffentlicht 08.12.2021 17:15:10
- Zuletzt bearbeitet 24.10.2025 14:13:36
- Erkennungen
LoginArbitrary file upload vulnerability in FatPipe software
A vulnerability in the web management interface of FatPipe WARP, IPVPN, and MPVPN software prior to versions 10.1.2r60p92 and 10.2.2r44p1 allows a remote, unauthenticated attacker to upload a file to any location on the filesystem. The FatPipe advisory identifier for this vulnerability is FPSA006.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Fatpipeinc ≫ Ipvpn Firmware Version 5.2.0 Update r34
Fatpipeinc ≫ Ipvpn Firmware Version 6.1.2 Update r70p26
Fatpipeinc ≫ Ipvpn Firmware Version 6.1.2 Update r70p45-m
Fatpipeinc ≫ Ipvpn Firmware Version 6.1.2 Update r70p75-m
Fatpipeinc ≫ Ipvpn Firmware Version 7.1.2 Update r39
Fatpipeinc ≫ Ipvpn Firmware Version 9.1.2 Update r129
Fatpipeinc ≫ Ipvpn Firmware Version 9.1.2 Update r144
Fatpipeinc ≫ Ipvpn Firmware Version 9.1.2 Update r150
Fatpipeinc ≫ Ipvpn Firmware Version 9.1.2 Update r156
Fatpipeinc ≫ Ipvpn Firmware Version 9.1.2 Update r161p12
Fatpipeinc ≫ Ipvpn Firmware Version 9.1.2 Update r161p16
Fatpipeinc ≫ Ipvpn Firmware Version 9.1.2 Update r161p17
Fatpipeinc ≫ Ipvpn Firmware Version 9.1.2 Update r161p2
Fatpipeinc ≫ Ipvpn Firmware Version 9.1.2 Update r161p20
Fatpipeinc ≫ Ipvpn Firmware Version 9.1.2 Update r161p26
Fatpipeinc ≫ Ipvpn Firmware Version 9.1.2 Update r161p3
Fatpipeinc ≫ Ipvpn Firmware Version 9.1.2 Update r164
Fatpipeinc ≫ Ipvpn Firmware Version 9.1.2 Update r164p4
Fatpipeinc ≫ Ipvpn Firmware Version 9.1.2 Update r164p5
Fatpipeinc ≫ Ipvpn Firmware Version 9.1.2 Update r165
Fatpipeinc ≫ Ipvpn Firmware Version 9.1.2 Update r180p2
Fatpipeinc ≫ Ipvpn Firmware Version 9.1.2 Update r185
Fatpipeinc ≫ Ipvpn Firmware Version 10.1.2 Update r60p10
Fatpipeinc ≫ Ipvpn Firmware Version 10.1.2 Update r60p13
Fatpipeinc ≫ Ipvpn Firmware Version 10.1.2 Update r60p32
Fatpipeinc ≫ Ipvpn Firmware Version 10.1.2 Update r60p35
Fatpipeinc ≫ Ipvpn Firmware Version 10.1.2 Update r60p45
Fatpipeinc ≫ Ipvpn Firmware Version 10.1.2 Update r60p55
Fatpipeinc ≫ Ipvpn Firmware Version 10.1.2 Update r60p58
Fatpipeinc ≫ Ipvpn Firmware Version 10.1.2 Update r60p58s1
Fatpipeinc ≫ Ipvpn Firmware Version 10.1.2 Update r60p65
Fatpipeinc ≫ Ipvpn Firmware Version 10.1.2 Update r60p71
Fatpipeinc ≫ Ipvpn Firmware Version 10.1.2 Update r60p82
Fatpipeinc ≫ Ipvpn Firmware Version 10.2.2 Update r10
Fatpipeinc ≫ Ipvpn Firmware Version 10.2.2 Update r25
Fatpipeinc ≫ Ipvpn Firmware Version 10.2.2 Update r38
Fatpipeinc ≫ Warp Firmware Version 5.2.0 Update r34
Fatpipeinc ≫ Warp Firmware Version 6.1.2 Update r70p26
Fatpipeinc ≫ Warp Firmware Version 6.1.2 Update r70p45-m
Fatpipeinc ≫ Warp Firmware Version 6.1.2 Update r70p75-m
Fatpipeinc ≫ Warp Firmware Version 7.1.2 Update r39
Fatpipeinc ≫ Warp Firmware Version 9.1.2 Update r129
Fatpipeinc ≫ Warp Firmware Version 9.1.2 Update r144
Fatpipeinc ≫ Warp Firmware Version 9.1.2 Update r150
Fatpipeinc ≫ Warp Firmware Version 9.1.2 Update r156
Fatpipeinc ≫ Warp Firmware Version 9.1.2 Update r161p12
Fatpipeinc ≫ Warp Firmware Version 9.1.2 Update r161p16
Fatpipeinc ≫ Warp Firmware Version 9.1.2 Update r161p17
Fatpipeinc ≫ Warp Firmware Version 9.1.2 Update r161p2
Fatpipeinc ≫ Warp Firmware Version 9.1.2 Update r161p20
Fatpipeinc ≫ Warp Firmware Version 9.1.2 Update r161p26
Fatpipeinc ≫ Warp Firmware Version 9.1.2 Update r161p3
Fatpipeinc ≫ Warp Firmware Version 9.1.2 Update r164
Fatpipeinc ≫ Warp Firmware Version 9.1.2 Update r164p4
Fatpipeinc ≫ Warp Firmware Version 9.1.2 Update r164p5
Fatpipeinc ≫ Warp Firmware Version 9.1.2 Update r165
Fatpipeinc ≫ Warp Firmware Version 9.1.2 Update r180p2
Fatpipeinc ≫ Warp Firmware Version 9.1.2 Update r185
Fatpipeinc ≫ Warp Firmware Version 10.1.2 Update r60p10
Fatpipeinc ≫ Warp Firmware Version 10.1.2 Update r60p13
Fatpipeinc ≫ Warp Firmware Version 10.1.2 Update r60p32
Fatpipeinc ≫ Warp Firmware Version 10.1.2 Update r60p35
Fatpipeinc ≫ Warp Firmware Version 10.1.2 Update r60p45
Fatpipeinc ≫ Warp Firmware Version 10.1.2 Update r60p55
Fatpipeinc ≫ Warp Firmware Version 10.1.2 Update r60p58
Fatpipeinc ≫ Warp Firmware Version 10.1.2 Update r60p58s1
Fatpipeinc ≫ Warp Firmware Version 10.1.2 Update r60p65
Fatpipeinc ≫ Warp Firmware Version 10.1.2 Update r60p71
Fatpipeinc ≫ Warp Firmware Version 10.1.2 Update r60p82
Fatpipeinc ≫ Warp Firmware Version 10.2.2 Update r10
Fatpipeinc ≫ Warp Firmware Version 10.2.2 Update r25
Fatpipeinc ≫ Warp Firmware Version 10.2.2 Update r38
Fatpipeinc ≫ Mpvpn Firmware Version 5.2.0 Update r34
Fatpipeinc ≫ Mpvpn Firmware Version 6.1.2 Update r70p26
Fatpipeinc ≫ Mpvpn Firmware Version 6.1.2 Update r70p45-m
Fatpipeinc ≫ Mpvpn Firmware Version 6.1.2 Update r70p75-m
Fatpipeinc ≫ Mpvpn Firmware Version 7.1.2 Update r39
Fatpipeinc ≫ Mpvpn Firmware Version 9.1.2 Update r129
Fatpipeinc ≫ Mpvpn Firmware Version 9.1.2 Update r144
Fatpipeinc ≫ Mpvpn Firmware Version 9.1.2 Update r150
Fatpipeinc ≫ Mpvpn Firmware Version 9.1.2 Update r156
Fatpipeinc ≫ Mpvpn Firmware Version 9.1.2 Update r161p12
Fatpipeinc ≫ Mpvpn Firmware Version 9.1.2 Update r161p16
Fatpipeinc ≫ Mpvpn Firmware Version 9.1.2 Update r161p17
Fatpipeinc ≫ Mpvpn Firmware Version 9.1.2 Update r161p2
Fatpipeinc ≫ Mpvpn Firmware Version 9.1.2 Update r161p20
Fatpipeinc ≫ Mpvpn Firmware Version 9.1.2 Update r161p26
Fatpipeinc ≫ Mpvpn Firmware Version 9.1.2 Update r161p3
Fatpipeinc ≫ Mpvpn Firmware Version 9.1.2 Update r164
Fatpipeinc ≫ Mpvpn Firmware Version 9.1.2 Update r164p4
Fatpipeinc ≫ Mpvpn Firmware Version 9.1.2 Update r164p5
Fatpipeinc ≫ Mpvpn Firmware Version 9.1.2 Update r165
Fatpipeinc ≫ Mpvpn Firmware Version 9.1.2 Update r180p2
Fatpipeinc ≫ Mpvpn Firmware Version 9.1.2 Update r185
Fatpipeinc ≫ Mpvpn Firmware Version 10.1.2 Update r60p10
Fatpipeinc ≫ Mpvpn Firmware Version 10.1.2 Update r60p13
Fatpipeinc ≫ Mpvpn Firmware Version 10.1.2 Update r60p32
Fatpipeinc ≫ Mpvpn Firmware Version 10.1.2 Update r60p35
Fatpipeinc ≫ Mpvpn Firmware Version 10.1.2 Update r60p45
Fatpipeinc ≫ Mpvpn Firmware Version 10.1.2 Update r60p55
Fatpipeinc ≫ Mpvpn Firmware Version 10.1.2 Update r60p58
Fatpipeinc ≫ Mpvpn Firmware Version 10.1.2 Update r60p58s1
Fatpipeinc ≫ Mpvpn Firmware Version 10.1.2 Update r60p65
Fatpipeinc ≫ Mpvpn Firmware Version 10.1.2 Update r60p71
Fatpipeinc ≫ Mpvpn Firmware Version 10.1.2 Update r60p82
Fatpipeinc ≫ Mpvpn Firmware Version 10.2.2 Update r10
Fatpipeinc ≫ Mpvpn Firmware Version 10.2.2 Update r25
Fatpipeinc ≫ Mpvpn Firmware Version 10.2.2 Update r38
10.01.2022: CISA Known Exploited Vulnerabilities (KEV) Catalog
FatPipe WARP, IPVPN, and MPVPN Configuration Upload exploit
SchwachstelleA vulnerability in the web management interface of FatPipe WARP, IPVPN, and MPVPN software allows a remote, unauthenticated attacker to upload a file to any location on the filesystem.
BeschreibungApply updates per vendor instructions.
Erforderliche Maßnahmen| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 39.82% | 0.984 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 8.8 | 2.8 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
|
| NIST | 9.3 | 8.6 | 10 |
AV:N/AC:M/Au:N/C:C/I:C/A:C
|
| CERT.org | 9.8 | 3.9 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
CWE-434 Unrestricted Upload of File with Dangerous Type
The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.
https://www.fatpipeinc.com/support/cve-list.php
https://www.ic3.gov/Media/News/2021/211117-2.pdf
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-27860