Read the docs
TI-2021-09213 Aliases CVE-2021-27855GHSA-53hg-58mg-7j38

FatPipe software allows privilege escalation

Priority MEDIUM 41CWE-862Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-862.

Summary

FatPipe WARP, IPVPN, and MPVPN software prior to versions 10.1.2r60p91 and 10.2.2r42 allows a remote, authenticated attacker with read-only privileges to grant themselves administrative privileges. Older versions of FatPipe software may also be vulnerable. The FatPipe advisory identifier for this vulnerability is FPSA001.

Why it matters now

EPSS 0.01657 76th percentileScored 2026-11-07
Fix Fixed WARP (FatPipe): 10.1.2r60p91, 10.2.2r42IPVPN (FatPipe): 10.1.2r60p91, 10.2.2r42+1 more product

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
FatPipeWARP10.1 to before 10.1.2r60p91; 10.2 to before 10.2.2r4210.1.2r60p91, 10.2.2r42Patch availableCNA
FatPipeIPVPN10.1 to before 10.1.2r60p91; 10.2 to before 10.2.2r4210.1.2r60p91, 10.2.2r42Patch availableCNA
FatPipeMPVPN10.1 to before 10.1.2r60p91; 10.2 to before 10.2.2r4210.1.2r60p91, 10.2.2r42Patch availableCNA
  • WARP VendorFatPipe Affected 10.1 to before 10.1.2r60p91; 10.2 to before 10.2.2r42 Fixed in 10.1.2r60p91, 10.2.2r42 Patch available CNA
  • IPVPN VendorFatPipe Affected 10.1 to before 10.1.2r60p91; 10.2 to before 10.2.2r42 Fixed in 10.1.2r60p91, 10.2.2r42 Patch available CNA
  • MPVPN VendorFatPipe Affected 10.1 to before 10.1.2r60p91; 10.2 to before 10.2.2r42 Fixed in 10.1.2r60p91, 10.2.2r42 Patch available CNA

CPE configurations NVD · 111

CPEVersionsRoleVendor
cpe:2.3:o:fatpipeinc:ipvpn_firmware:5.2.0:r34:*:*:*:*:*:*5.2.0 r34VulnerableFatPipe
cpe:2.3:o:fatpipeinc:ipvpn_firmware:6.1.2:r70p26:*:*:*:*:*:*6.1.2 r70p26VulnerableFatPipe
cpe:2.3:o:fatpipeinc:ipvpn_firmware:6.1.2:r70p45-m:*:*:*:*:*:*6.1.2 r70p45-mVulnerableFatPipe
cpe:2.3:o:fatpipeinc:ipvpn_firmware:6.1.2:r70p75-m:*:*:*:*:*:*6.1.2 r70p75-mVulnerableFatPipe
cpe:2.3:o:fatpipeinc:ipvpn_firmware:7.1.2:r39:*:*:*:*:*:*7.1.2 r39VulnerableFatPipe
cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r129:*:*:*:*:*:*9.1.2 r129VulnerableFatPipe
cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r144:*:*:*:*:*:*9.1.2 r144VulnerableFatPipe
cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r150:*:*:*:*:*:*9.1.2 r150VulnerableFatPipe
cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r156:*:*:*:*:*:*9.1.2 r156VulnerableFatPipe
cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r161p12:*:*:*:*:*:*9.1.2 r161p12VulnerableFatPipe
  • cpe:2.3:o:fatpipeinc:ipvpn_firmware:5.2.0:r34:*:*:*:*:*:* Versions 5.2.0 r34 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:ipvpn_firmware:6.1.2:r70p26:*:*:*:*:*:* Versions 6.1.2 r70p26 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:ipvpn_firmware:6.1.2:r70p45-m:*:*:*:*:*:* Versions 6.1.2 r70p45-m Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:ipvpn_firmware:6.1.2:r70p75-m:*:*:*:*:*:* Versions 6.1.2 r70p75-m Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:ipvpn_firmware:7.1.2:r39:*:*:*:*:*:* Versions 7.1.2 r39 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r129:*:*:*:*:*:* Versions 9.1.2 r129 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r144:*:*:*:*:*:* Versions 9.1.2 r144 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r150:*:*:*:*:*:* Versions 9.1.2 r150 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r156:*:*:*:*:*:* Versions 9.1.2 r156 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r161p12:*:*:*:*:*:* Versions 9.1.2 r161p12 Vulnerable ·FatPipe
Show 101 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r161p16:*:*:*:*:*:*9.1.2 r161p16VulnerableFatPipe
cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r161p17:*:*:*:*:*:*9.1.2 r161p17VulnerableFatPipe
cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r161p2:*:*:*:*:*:*9.1.2 r161p2VulnerableFatPipe
cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r161p20:*:*:*:*:*:*9.1.2 r161p20VulnerableFatPipe
cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r161p26:*:*:*:*:*:*9.1.2 r161p26VulnerableFatPipe
cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r161p3:*:*:*:*:*:*9.1.2 r161p3VulnerableFatPipe
cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r164:*:*:*:*:*:*9.1.2 r164VulnerableFatPipe
cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r164p4:*:*:*:*:*:*9.1.2 r164p4VulnerableFatPipe
cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r164p5:*:*:*:*:*:*9.1.2 r164p5VulnerableFatPipe
cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r165:*:*:*:*:*:*9.1.2 r165VulnerableFatPipe
cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r180p2:*:*:*:*:*:*9.1.2 r180p2VulnerableFatPipe
cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r185:*:*:*:*:*:*9.1.2 r185VulnerableFatPipe
cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.1.2:r60p10:*:*:*:*:*:*10.1.2 r60p10VulnerableFatPipe
cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.1.2:r60p13:*:*:*:*:*:*10.1.2 r60p13VulnerableFatPipe
cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.1.2:r60p32:*:*:*:*:*:*10.1.2 r60p32VulnerableFatPipe
cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.1.2:r60p35:*:*:*:*:*:*10.1.2 r60p35VulnerableFatPipe
cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.1.2:r60p45:*:*:*:*:*:*10.1.2 r60p45VulnerableFatPipe
cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.1.2:r60p55:*:*:*:*:*:*10.1.2 r60p55VulnerableFatPipe
cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.1.2:r60p58:*:*:*:*:*:*10.1.2 r60p58VulnerableFatPipe
cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.1.2:r60p58s1:*:*:*:*:*:*10.1.2 r60p58s1VulnerableFatPipe
cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.1.2:r60p65:*:*:*:*:*:*10.1.2 r60p65VulnerableFatPipe
cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.1.2:r60p71:*:*:*:*:*:*10.1.2 r60p71VulnerableFatPipe
cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.1.2:r60p82:*:*:*:*:*:*10.1.2 r60p82VulnerableFatPipe
cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.2.2:r10:*:*:*:*:*:*10.2.2 r10VulnerableFatPipe
cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.2.2:r25:*:*:*:*:*:*10.2.2 r25VulnerableFatPipe
cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.2.2:r38:*:*:*:*:*:*10.2.2 r38VulnerableFatPipe
cpe:2.3:h:fatpipeinc:ipvpn:-:*:*:*:*:*:*:*not specified by NVDRunning onFatPipe
cpe:2.3:o:fatpipeinc:warp_firmware:5.2.0:r34:*:*:*:*:*:*5.2.0 r34VulnerableFatPipe
cpe:2.3:o:fatpipeinc:warp_firmware:6.1.2:r70p26:*:*:*:*:*:*6.1.2 r70p26VulnerableFatPipe
cpe:2.3:o:fatpipeinc:warp_firmware:6.1.2:r70p45-m:*:*:*:*:*:*6.1.2 r70p45-mVulnerableFatPipe
cpe:2.3:o:fatpipeinc:warp_firmware:6.1.2:r70p75-m:*:*:*:*:*:*6.1.2 r70p75-mVulnerableFatPipe
cpe:2.3:o:fatpipeinc:warp_firmware:7.1.2:r39:*:*:*:*:*:*7.1.2 r39VulnerableFatPipe
cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r129:*:*:*:*:*:*9.1.2 r129VulnerableFatPipe
cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r144:*:*:*:*:*:*9.1.2 r144VulnerableFatPipe
cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r150:*:*:*:*:*:*9.1.2 r150VulnerableFatPipe
cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r156:*:*:*:*:*:*9.1.2 r156VulnerableFatPipe
cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r161p12:*:*:*:*:*:*9.1.2 r161p12VulnerableFatPipe
cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r161p16:*:*:*:*:*:*9.1.2 r161p16VulnerableFatPipe
cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r161p17:*:*:*:*:*:*9.1.2 r161p17VulnerableFatPipe
cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r161p2:*:*:*:*:*:*9.1.2 r161p2VulnerableFatPipe
cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r161p20:*:*:*:*:*:*9.1.2 r161p20VulnerableFatPipe
cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r161p26:*:*:*:*:*:*9.1.2 r161p26VulnerableFatPipe
cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r161p3:*:*:*:*:*:*9.1.2 r161p3VulnerableFatPipe
cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r164:*:*:*:*:*:*9.1.2 r164VulnerableFatPipe
cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r164p4:*:*:*:*:*:*9.1.2 r164p4VulnerableFatPipe
cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r164p5:*:*:*:*:*:*9.1.2 r164p5VulnerableFatPipe
cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r165:*:*:*:*:*:*9.1.2 r165VulnerableFatPipe
cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r180p2:*:*:*:*:*:*9.1.2 r180p2VulnerableFatPipe
cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r185:*:*:*:*:*:*9.1.2 r185VulnerableFatPipe
cpe:2.3:o:fatpipeinc:warp_firmware:10.1.2:r60p10:*:*:*:*:*:*10.1.2 r60p10VulnerableFatPipe
cpe:2.3:o:fatpipeinc:warp_firmware:10.1.2:r60p13:*:*:*:*:*:*10.1.2 r60p13VulnerableFatPipe
cpe:2.3:o:fatpipeinc:warp_firmware:10.1.2:r60p32:*:*:*:*:*:*10.1.2 r60p32VulnerableFatPipe
cpe:2.3:o:fatpipeinc:warp_firmware:10.1.2:r60p35:*:*:*:*:*:*10.1.2 r60p35VulnerableFatPipe
cpe:2.3:o:fatpipeinc:warp_firmware:10.1.2:r60p45:*:*:*:*:*:*10.1.2 r60p45VulnerableFatPipe
cpe:2.3:o:fatpipeinc:warp_firmware:10.1.2:r60p55:*:*:*:*:*:*10.1.2 r60p55VulnerableFatPipe
cpe:2.3:o:fatpipeinc:warp_firmware:10.1.2:r60p58:*:*:*:*:*:*10.1.2 r60p58VulnerableFatPipe
cpe:2.3:o:fatpipeinc:warp_firmware:10.1.2:r60p58s1:*:*:*:*:*:*10.1.2 r60p58s1VulnerableFatPipe
cpe:2.3:o:fatpipeinc:warp_firmware:10.1.2:r60p65:*:*:*:*:*:*10.1.2 r60p65VulnerableFatPipe
cpe:2.3:o:fatpipeinc:warp_firmware:10.1.2:r60p71:*:*:*:*:*:*10.1.2 r60p71VulnerableFatPipe
cpe:2.3:o:fatpipeinc:warp_firmware:10.1.2:r60p82:*:*:*:*:*:*10.1.2 r60p82VulnerableFatPipe
cpe:2.3:o:fatpipeinc:warp_firmware:10.2.2:r10:*:*:*:*:*:*10.2.2 r10VulnerableFatPipe
cpe:2.3:o:fatpipeinc:warp_firmware:10.2.2:r25:*:*:*:*:*:*10.2.2 r25VulnerableFatPipe
cpe:2.3:o:fatpipeinc:warp_firmware:10.2.2:r38:*:*:*:*:*:*10.2.2 r38VulnerableFatPipe
cpe:2.3:h:fatpipeinc:warp:-:*:*:*:*:*:*:*not specified by NVDRunning onFatPipe
cpe:2.3:o:fatpipeinc:mpvpn_firmware:5.2.0:r34:*:*:*:*:*:*5.2.0 r34VulnerableFatPipe
cpe:2.3:o:fatpipeinc:mpvpn_firmware:6.1.2:r70p26:*:*:*:*:*:*6.1.2 r70p26VulnerableFatPipe
cpe:2.3:o:fatpipeinc:mpvpn_firmware:6.1.2:r70p45-m:*:*:*:*:*:*6.1.2 r70p45-mVulnerableFatPipe
cpe:2.3:o:fatpipeinc:mpvpn_firmware:6.1.2:r70p75-m:*:*:*:*:*:*6.1.2 r70p75-mVulnerableFatPipe
cpe:2.3:o:fatpipeinc:mpvpn_firmware:7.1.2:r39:*:*:*:*:*:*7.1.2 r39VulnerableFatPipe
cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r129:*:*:*:*:*:*9.1.2 r129VulnerableFatPipe
cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r144:*:*:*:*:*:*9.1.2 r144VulnerableFatPipe
cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r150:*:*:*:*:*:*9.1.2 r150VulnerableFatPipe
cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r156:*:*:*:*:*:*9.1.2 r156VulnerableFatPipe
cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r161p12:*:*:*:*:*:*9.1.2 r161p12VulnerableFatPipe
cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r161p16:*:*:*:*:*:*9.1.2 r161p16VulnerableFatPipe
cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r161p17:*:*:*:*:*:*9.1.2 r161p17VulnerableFatPipe
cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r161p2:*:*:*:*:*:*9.1.2 r161p2VulnerableFatPipe
cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r161p20:*:*:*:*:*:*9.1.2 r161p20VulnerableFatPipe
cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r161p26:*:*:*:*:*:*9.1.2 r161p26VulnerableFatPipe
cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r161p3:*:*:*:*:*:*9.1.2 r161p3VulnerableFatPipe
cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r164:*:*:*:*:*:*9.1.2 r164VulnerableFatPipe
cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r164p4:*:*:*:*:*:*9.1.2 r164p4VulnerableFatPipe
cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r164p5:*:*:*:*:*:*9.1.2 r164p5VulnerableFatPipe
cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r165:*:*:*:*:*:*9.1.2 r165VulnerableFatPipe
cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r180p2:*:*:*:*:*:*9.1.2 r180p2VulnerableFatPipe
cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r185:*:*:*:*:*:*9.1.2 r185VulnerableFatPipe
cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.1.2:r60p10:*:*:*:*:*:*10.1.2 r60p10VulnerableFatPipe
cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.1.2:r60p13:*:*:*:*:*:*10.1.2 r60p13VulnerableFatPipe
cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.1.2:r60p32:*:*:*:*:*:*10.1.2 r60p32VulnerableFatPipe
cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.1.2:r60p35:*:*:*:*:*:*10.1.2 r60p35VulnerableFatPipe
cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.1.2:r60p45:*:*:*:*:*:*10.1.2 r60p45VulnerableFatPipe
cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.1.2:r60p55:*:*:*:*:*:*10.1.2 r60p55VulnerableFatPipe
cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.1.2:r60p58:*:*:*:*:*:*10.1.2 r60p58VulnerableFatPipe
cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.1.2:r60p58s1:*:*:*:*:*:*10.1.2 r60p58s1VulnerableFatPipe
cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.1.2:r60p65:*:*:*:*:*:*10.1.2 r60p65VulnerableFatPipe
cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.1.2:r60p71:*:*:*:*:*:*10.1.2 r60p71VulnerableFatPipe
cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.1.2:r60p82:*:*:*:*:*:*10.1.2 r60p82VulnerableFatPipe
cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.2.2:r10:*:*:*:*:*:*10.2.2 r10VulnerableFatPipe
cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.2.2:r25:*:*:*:*:*:*10.2.2 r25VulnerableFatPipe
cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.2.2:r38:*:*:*:*:*:*10.2.2 r38VulnerableFatPipe
cpe:2.3:h:fatpipeinc:mpvpn:-:*:*:*:*:*:*:*not specified by NVDRunning onFatPipe
  • cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r161p16:*:*:*:*:*:* Versions 9.1.2 r161p16 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r161p17:*:*:*:*:*:* Versions 9.1.2 r161p17 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r161p2:*:*:*:*:*:* Versions 9.1.2 r161p2 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r161p20:*:*:*:*:*:* Versions 9.1.2 r161p20 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r161p26:*:*:*:*:*:* Versions 9.1.2 r161p26 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r161p3:*:*:*:*:*:* Versions 9.1.2 r161p3 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r164:*:*:*:*:*:* Versions 9.1.2 r164 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r164p4:*:*:*:*:*:* Versions 9.1.2 r164p4 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r164p5:*:*:*:*:*:* Versions 9.1.2 r164p5 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r165:*:*:*:*:*:* Versions 9.1.2 r165 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r180p2:*:*:*:*:*:* Versions 9.1.2 r180p2 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r185:*:*:*:*:*:* Versions 9.1.2 r185 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.1.2:r60p10:*:*:*:*:*:* Versions 10.1.2 r60p10 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.1.2:r60p13:*:*:*:*:*:* Versions 10.1.2 r60p13 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.1.2:r60p32:*:*:*:*:*:* Versions 10.1.2 r60p32 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.1.2:r60p35:*:*:*:*:*:* Versions 10.1.2 r60p35 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.1.2:r60p45:*:*:*:*:*:* Versions 10.1.2 r60p45 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.1.2:r60p55:*:*:*:*:*:* Versions 10.1.2 r60p55 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.1.2:r60p58:*:*:*:*:*:* Versions 10.1.2 r60p58 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.1.2:r60p58s1:*:*:*:*:*:* Versions 10.1.2 r60p58s1 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.1.2:r60p65:*:*:*:*:*:* Versions 10.1.2 r60p65 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.1.2:r60p71:*:*:*:*:*:* Versions 10.1.2 r60p71 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.1.2:r60p82:*:*:*:*:*:* Versions 10.1.2 r60p82 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.2.2:r10:*:*:*:*:*:* Versions 10.2.2 r10 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.2.2:r25:*:*:*:*:*:* Versions 10.2.2 r25 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.2.2:r38:*:*:*:*:*:* Versions 10.2.2 r38 Vulnerable ·FatPipe
  • cpe:2.3:h:fatpipeinc:ipvpn:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·FatPipe
  • cpe:2.3:o:fatpipeinc:warp_firmware:5.2.0:r34:*:*:*:*:*:* Versions 5.2.0 r34 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:warp_firmware:6.1.2:r70p26:*:*:*:*:*:* Versions 6.1.2 r70p26 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:warp_firmware:6.1.2:r70p45-m:*:*:*:*:*:* Versions 6.1.2 r70p45-m Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:warp_firmware:6.1.2:r70p75-m:*:*:*:*:*:* Versions 6.1.2 r70p75-m Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:warp_firmware:7.1.2:r39:*:*:*:*:*:* Versions 7.1.2 r39 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r129:*:*:*:*:*:* Versions 9.1.2 r129 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r144:*:*:*:*:*:* Versions 9.1.2 r144 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r150:*:*:*:*:*:* Versions 9.1.2 r150 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r156:*:*:*:*:*:* Versions 9.1.2 r156 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r161p12:*:*:*:*:*:* Versions 9.1.2 r161p12 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r161p16:*:*:*:*:*:* Versions 9.1.2 r161p16 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r161p17:*:*:*:*:*:* Versions 9.1.2 r161p17 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r161p2:*:*:*:*:*:* Versions 9.1.2 r161p2 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r161p20:*:*:*:*:*:* Versions 9.1.2 r161p20 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r161p26:*:*:*:*:*:* Versions 9.1.2 r161p26 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r161p3:*:*:*:*:*:* Versions 9.1.2 r161p3 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r164:*:*:*:*:*:* Versions 9.1.2 r164 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r164p4:*:*:*:*:*:* Versions 9.1.2 r164p4 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r164p5:*:*:*:*:*:* Versions 9.1.2 r164p5 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r165:*:*:*:*:*:* Versions 9.1.2 r165 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r180p2:*:*:*:*:*:* Versions 9.1.2 r180p2 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r185:*:*:*:*:*:* Versions 9.1.2 r185 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:warp_firmware:10.1.2:r60p10:*:*:*:*:*:* Versions 10.1.2 r60p10 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:warp_firmware:10.1.2:r60p13:*:*:*:*:*:* Versions 10.1.2 r60p13 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:warp_firmware:10.1.2:r60p32:*:*:*:*:*:* Versions 10.1.2 r60p32 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:warp_firmware:10.1.2:r60p35:*:*:*:*:*:* Versions 10.1.2 r60p35 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:warp_firmware:10.1.2:r60p45:*:*:*:*:*:* Versions 10.1.2 r60p45 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:warp_firmware:10.1.2:r60p55:*:*:*:*:*:* Versions 10.1.2 r60p55 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:warp_firmware:10.1.2:r60p58:*:*:*:*:*:* Versions 10.1.2 r60p58 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:warp_firmware:10.1.2:r60p58s1:*:*:*:*:*:* Versions 10.1.2 r60p58s1 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:warp_firmware:10.1.2:r60p65:*:*:*:*:*:* Versions 10.1.2 r60p65 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:warp_firmware:10.1.2:r60p71:*:*:*:*:*:* Versions 10.1.2 r60p71 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:warp_firmware:10.1.2:r60p82:*:*:*:*:*:* Versions 10.1.2 r60p82 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:warp_firmware:10.2.2:r10:*:*:*:*:*:* Versions 10.2.2 r10 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:warp_firmware:10.2.2:r25:*:*:*:*:*:* Versions 10.2.2 r25 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:warp_firmware:10.2.2:r38:*:*:*:*:*:* Versions 10.2.2 r38 Vulnerable ·FatPipe
  • cpe:2.3:h:fatpipeinc:warp:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·FatPipe
  • cpe:2.3:o:fatpipeinc:mpvpn_firmware:5.2.0:r34:*:*:*:*:*:* Versions 5.2.0 r34 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:mpvpn_firmware:6.1.2:r70p26:*:*:*:*:*:* Versions 6.1.2 r70p26 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:mpvpn_firmware:6.1.2:r70p45-m:*:*:*:*:*:* Versions 6.1.2 r70p45-m Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:mpvpn_firmware:6.1.2:r70p75-m:*:*:*:*:*:* Versions 6.1.2 r70p75-m Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:mpvpn_firmware:7.1.2:r39:*:*:*:*:*:* Versions 7.1.2 r39 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r129:*:*:*:*:*:* Versions 9.1.2 r129 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r144:*:*:*:*:*:* Versions 9.1.2 r144 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r150:*:*:*:*:*:* Versions 9.1.2 r150 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r156:*:*:*:*:*:* Versions 9.1.2 r156 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r161p12:*:*:*:*:*:* Versions 9.1.2 r161p12 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r161p16:*:*:*:*:*:* Versions 9.1.2 r161p16 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r161p17:*:*:*:*:*:* Versions 9.1.2 r161p17 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r161p2:*:*:*:*:*:* Versions 9.1.2 r161p2 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r161p20:*:*:*:*:*:* Versions 9.1.2 r161p20 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r161p26:*:*:*:*:*:* Versions 9.1.2 r161p26 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r161p3:*:*:*:*:*:* Versions 9.1.2 r161p3 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r164:*:*:*:*:*:* Versions 9.1.2 r164 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r164p4:*:*:*:*:*:* Versions 9.1.2 r164p4 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r164p5:*:*:*:*:*:* Versions 9.1.2 r164p5 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r165:*:*:*:*:*:* Versions 9.1.2 r165 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r180p2:*:*:*:*:*:* Versions 9.1.2 r180p2 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r185:*:*:*:*:*:* Versions 9.1.2 r185 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.1.2:r60p10:*:*:*:*:*:* Versions 10.1.2 r60p10 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.1.2:r60p13:*:*:*:*:*:* Versions 10.1.2 r60p13 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.1.2:r60p32:*:*:*:*:*:* Versions 10.1.2 r60p32 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.1.2:r60p35:*:*:*:*:*:* Versions 10.1.2 r60p35 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.1.2:r60p45:*:*:*:*:*:* Versions 10.1.2 r60p45 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.1.2:r60p55:*:*:*:*:*:* Versions 10.1.2 r60p55 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.1.2:r60p58:*:*:*:*:*:* Versions 10.1.2 r60p58 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.1.2:r60p58s1:*:*:*:*:*:* Versions 10.1.2 r60p58s1 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.1.2:r60p65:*:*:*:*:*:* Versions 10.1.2 r60p65 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.1.2:r60p71:*:*:*:*:*:* Versions 10.1.2 r60p71 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.1.2:r60p82:*:*:*:*:*:* Versions 10.1.2 r60p82 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.2.2:r10:*:*:*:*:*:* Versions 10.2.2 r10 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.2.2:r25:*:*:*:*:*:* Versions 10.2.2 r25 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.2.2:r38:*:*:*:*:*:* Versions 10.2.2 r38 Vulnerable ·FatPipe
  • cpe:2.3:h:fatpipeinc:mpvpn:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·FatPipe

Remediation

  • Fix · CNA WARP (FatPipe) Fixed in 10.1.2r60p91, 10.2.2r42
  • Fix · CNA IPVPN (FatPipe) Fixed in 10.1.2r60p91, 10.2.2r42
  • Fix · CNA MPVPN (FatPipe) Fixed in 10.1.2r60p91, 10.2.2r42

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    FatPipe IPVPN, MPVPN, WARP 10.1.2r60p91, 10.2.2r42

    5 records Highest priority Priority MEDIUM 3 MEDIUM, 2 LOW

    Other records, highest priority first

    • TI-2021-09214 FatPipe software administrative account with no passwordPriority MEDIUM 50
    • TI-2021-09217 Missing authorization vulnerability in FatPipe softwarePriority MEDIUM 41
    • TI-2021-09215 FatPipe software allows unauthenticated configuration downloadPriority LOW 37
    Show all 5 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2021-27855
  2. 2026-10-03 Alias added: GHSA-53hg-58mg-7j38

References

Advisory 3

  • TI-2021-09218 Arbitrary file upload vulnerability in FatPipe software KEVCVSS 3.1CRITICAL 9.8
  • TI-2021-09214 FatPipe software administrative account with no password CVSS 3.1CRITICAL 9.8
  • TI-2021-09217 Missing authorization vulnerability in FatPipe software CVSS 3.1HIGH 8.8
  • TI-2021-09215 FatPipe software allows unauthenticated configuration download CVSS 3.1HIGH 7.5
  • TI-2021-09216 Missing authorization vulnerability in FatPipe software CVSS 3.1MEDIUM 5.3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences