FatPipe software allows unauthenticated configuration download
Priority LOW 37CWE-862Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- High · None · None
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-862.
Summary
A missing authorization vulnerability in the web management interface of FatPipe WARP, IPVPN, and MPVPN software prior to versions 10.1.2r60p91 and 10.2.2r42 allows a remote, unauthenticated attacker to download a configuration archive. The attacker needs to know or correctly guess the hostname of the target system since the hostname is used as part of the configuration archive file name. Older versions of FatPipe software may also be vulnerable. The FatPipe advisory identifier for this vulnerability is FPSA003.
Why it matters now
EPSS 0.01853 79th percentileScored 2026-11-07
Fix Fixed WARP (FatPipe): 10.1.2r60p91, 10.2.2r42IPVPN (FatPipe): 10.1.2r60p91, 10.2.2r42+1 more product
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| FatPipe | WARP | 10.1 to before 10.1.2r60p91; 10.2 to before 10.2.2r42 | 10.1.2r60p91, 10.2.2r42 | Patch available | CNA |
| FatPipe | IPVPN | 10.1 to before 10.1.2r60p91; 10.2 to before 10.2.2r42 | 10.1.2r60p91, 10.2.2r42 | Patch available | CNA |
| FatPipe | MPVPN | 10.1 to before 10.1.2r60p91; 10.2 to before 10.2.2r42 | 10.1.2r60p91, 10.2.2r42 | Patch available | CNA |
- WARP VendorFatPipe Affected 10.1 to before 10.1.2r60p91; 10.2 to before 10.2.2r42 Fixed in 10.1.2r60p91, 10.2.2r42 Patch available CNA
- IPVPN VendorFatPipe Affected 10.1 to before 10.1.2r60p91; 10.2 to before 10.2.2r42 Fixed in 10.1.2r60p91, 10.2.2r42 Patch available CNA
- MPVPN VendorFatPipe Affected 10.1 to before 10.1.2r60p91; 10.2 to before 10.2.2r42 Fixed in 10.1.2r60p91, 10.2.2r42 Patch available CNA
CPE configurations NVD · 111
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:fatpipeinc:ipvpn_firmware:5.2.0:r34:*:*:*:*:*:* | 5.2.0 r34 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:ipvpn_firmware:6.1.2:r70p26:*:*:*:*:*:* | 6.1.2 r70p26 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:ipvpn_firmware:6.1.2:r70p45-m:*:*:*:*:*:* | 6.1.2 r70p45-m | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:ipvpn_firmware:6.1.2:r70p75-m:*:*:*:*:*:* | 6.1.2 r70p75-m | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:ipvpn_firmware:7.1.2:r39:*:*:*:*:*:* | 7.1.2 r39 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r129:*:*:*:*:*:* | 9.1.2 r129 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r144:*:*:*:*:*:* | 9.1.2 r144 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r150:*:*:*:*:*:* | 9.1.2 r150 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r156:*:*:*:*:*:* | 9.1.2 r156 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r161p12:*:*:*:*:*:* | 9.1.2 r161p12 | Vulnerable | FatPipe |
- cpe:2.3:o:fatpipeinc:ipvpn_firmware:5.2.0:r34:*:*:*:*:*:* Versions 5.2.0 r34 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:ipvpn_firmware:6.1.2:r70p26:*:*:*:*:*:* Versions 6.1.2 r70p26 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:ipvpn_firmware:6.1.2:r70p45-m:*:*:*:*:*:* Versions 6.1.2 r70p45-m Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:ipvpn_firmware:6.1.2:r70p75-m:*:*:*:*:*:* Versions 6.1.2 r70p75-m Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:ipvpn_firmware:7.1.2:r39:*:*:*:*:*:* Versions 7.1.2 r39 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r129:*:*:*:*:*:* Versions 9.1.2 r129 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r144:*:*:*:*:*:* Versions 9.1.2 r144 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r150:*:*:*:*:*:* Versions 9.1.2 r150 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r156:*:*:*:*:*:* Versions 9.1.2 r156 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r161p12:*:*:*:*:*:* Versions 9.1.2 r161p12 Vulnerable ·FatPipe
Show 101 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r161p16:*:*:*:*:*:* | 9.1.2 r161p16 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r161p17:*:*:*:*:*:* | 9.1.2 r161p17 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r161p2:*:*:*:*:*:* | 9.1.2 r161p2 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r161p20:*:*:*:*:*:* | 9.1.2 r161p20 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r161p26:*:*:*:*:*:* | 9.1.2 r161p26 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r161p3:*:*:*:*:*:* | 9.1.2 r161p3 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r164:*:*:*:*:*:* | 9.1.2 r164 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r164p4:*:*:*:*:*:* | 9.1.2 r164p4 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r164p5:*:*:*:*:*:* | 9.1.2 r164p5 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r165:*:*:*:*:*:* | 9.1.2 r165 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r180p2:*:*:*:*:*:* | 9.1.2 r180p2 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r185:*:*:*:*:*:* | 9.1.2 r185 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.1.2:r60p10:*:*:*:*:*:* | 10.1.2 r60p10 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.1.2:r60p13:*:*:*:*:*:* | 10.1.2 r60p13 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.1.2:r60p32:*:*:*:*:*:* | 10.1.2 r60p32 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.1.2:r60p35:*:*:*:*:*:* | 10.1.2 r60p35 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.1.2:r60p45:*:*:*:*:*:* | 10.1.2 r60p45 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.1.2:r60p55:*:*:*:*:*:* | 10.1.2 r60p55 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.1.2:r60p58:*:*:*:*:*:* | 10.1.2 r60p58 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.1.2:r60p58s1:*:*:*:*:*:* | 10.1.2 r60p58s1 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.1.2:r60p65:*:*:*:*:*:* | 10.1.2 r60p65 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.1.2:r60p71:*:*:*:*:*:* | 10.1.2 r60p71 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.1.2:r60p82:*:*:*:*:*:* | 10.1.2 r60p82 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.2.2:r10:*:*:*:*:*:* | 10.2.2 r10 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.2.2:r25:*:*:*:*:*:* | 10.2.2 r25 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.2.2:r38:*:*:*:*:*:* | 10.2.2 r38 | Vulnerable | FatPipe |
| cpe:2.3:h:fatpipeinc:ipvpn:-:*:*:*:*:*:*:* | not specified by NVD | Running on | FatPipe |
| cpe:2.3:o:fatpipeinc:mpvpn_firmware:5.2.0:r34:*:*:*:*:*:* | 5.2.0 r34 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:mpvpn_firmware:6.1.2:r70p26:*:*:*:*:*:* | 6.1.2 r70p26 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:mpvpn_firmware:6.1.2:r70p45-m:*:*:*:*:*:* | 6.1.2 r70p45-m | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:mpvpn_firmware:6.1.2:r70p75-m:*:*:*:*:*:* | 6.1.2 r70p75-m | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:mpvpn_firmware:7.1.2:r39:*:*:*:*:*:* | 7.1.2 r39 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r129:*:*:*:*:*:* | 9.1.2 r129 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r144:*:*:*:*:*:* | 9.1.2 r144 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r150:*:*:*:*:*:* | 9.1.2 r150 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r156:*:*:*:*:*:* | 9.1.2 r156 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r161p12:*:*:*:*:*:* | 9.1.2 r161p12 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r161p16:*:*:*:*:*:* | 9.1.2 r161p16 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r161p17:*:*:*:*:*:* | 9.1.2 r161p17 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r161p2:*:*:*:*:*:* | 9.1.2 r161p2 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r161p20:*:*:*:*:*:* | 9.1.2 r161p20 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r161p26:*:*:*:*:*:* | 9.1.2 r161p26 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r161p3:*:*:*:*:*:* | 9.1.2 r161p3 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r164:*:*:*:*:*:* | 9.1.2 r164 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r164p4:*:*:*:*:*:* | 9.1.2 r164p4 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r164p5:*:*:*:*:*:* | 9.1.2 r164p5 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r165:*:*:*:*:*:* | 9.1.2 r165 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r180p2:*:*:*:*:*:* | 9.1.2 r180p2 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r185:*:*:*:*:*:* | 9.1.2 r185 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.1.2:r60p10:*:*:*:*:*:* | 10.1.2 r60p10 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.1.2:r60p13:*:*:*:*:*:* | 10.1.2 r60p13 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.1.2:r60p32:*:*:*:*:*:* | 10.1.2 r60p32 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.1.2:r60p35:*:*:*:*:*:* | 10.1.2 r60p35 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.1.2:r60p45:*:*:*:*:*:* | 10.1.2 r60p45 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.1.2:r60p55:*:*:*:*:*:* | 10.1.2 r60p55 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.1.2:r60p58:*:*:*:*:*:* | 10.1.2 r60p58 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.1.2:r60p58s1:*:*:*:*:*:* | 10.1.2 r60p58s1 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.1.2:r60p65:*:*:*:*:*:* | 10.1.2 r60p65 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.1.2:r60p71:*:*:*:*:*:* | 10.1.2 r60p71 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.1.2:r60p82:*:*:*:*:*:* | 10.1.2 r60p82 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.2.2:r10:*:*:*:*:*:* | 10.2.2 r10 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.2.2:r25:*:*:*:*:*:* | 10.2.2 r25 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.2.2:r38:*:*:*:*:*:* | 10.2.2 r38 | Vulnerable | FatPipe |
| cpe:2.3:h:fatpipeinc:mpvpn:-:*:*:*:*:*:*:* | not specified by NVD | Running on | FatPipe |
| cpe:2.3:o:fatpipeinc:warp_firmware:5.2.0:r34:*:*:*:*:*:* | 5.2.0 r34 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:warp_firmware:6.1.2:r70p26:*:*:*:*:*:* | 6.1.2 r70p26 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:warp_firmware:6.1.2:r70p45-m:*:*:*:*:*:* | 6.1.2 r70p45-m | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:warp_firmware:6.1.2:r70p75-m:*:*:*:*:*:* | 6.1.2 r70p75-m | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:warp_firmware:7.1.2:r39:*:*:*:*:*:* | 7.1.2 r39 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r129:*:*:*:*:*:* | 9.1.2 r129 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r144:*:*:*:*:*:* | 9.1.2 r144 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r150:*:*:*:*:*:* | 9.1.2 r150 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r156:*:*:*:*:*:* | 9.1.2 r156 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r161p12:*:*:*:*:*:* | 9.1.2 r161p12 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r161p16:*:*:*:*:*:* | 9.1.2 r161p16 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r161p17:*:*:*:*:*:* | 9.1.2 r161p17 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r161p2:*:*:*:*:*:* | 9.1.2 r161p2 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r161p20:*:*:*:*:*:* | 9.1.2 r161p20 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r161p26:*:*:*:*:*:* | 9.1.2 r161p26 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r161p3:*:*:*:*:*:* | 9.1.2 r161p3 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r164:*:*:*:*:*:* | 9.1.2 r164 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r164p4:*:*:*:*:*:* | 9.1.2 r164p4 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r164p5:*:*:*:*:*:* | 9.1.2 r164p5 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r165:*:*:*:*:*:* | 9.1.2 r165 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r180p2:*:*:*:*:*:* | 9.1.2 r180p2 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r185:*:*:*:*:*:* | 9.1.2 r185 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:warp_firmware:10.1.2:r60p10:*:*:*:*:*:* | 10.1.2 r60p10 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:warp_firmware:10.1.2:r60p13:*:*:*:*:*:* | 10.1.2 r60p13 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:warp_firmware:10.1.2:r60p32:*:*:*:*:*:* | 10.1.2 r60p32 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:warp_firmware:10.1.2:r60p35:*:*:*:*:*:* | 10.1.2 r60p35 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:warp_firmware:10.1.2:r60p45:*:*:*:*:*:* | 10.1.2 r60p45 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:warp_firmware:10.1.2:r60p55:*:*:*:*:*:* | 10.1.2 r60p55 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:warp_firmware:10.1.2:r60p58:*:*:*:*:*:* | 10.1.2 r60p58 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:warp_firmware:10.1.2:r60p58s1:*:*:*:*:*:* | 10.1.2 r60p58s1 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:warp_firmware:10.1.2:r60p65:*:*:*:*:*:* | 10.1.2 r60p65 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:warp_firmware:10.1.2:r60p71:*:*:*:*:*:* | 10.1.2 r60p71 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:warp_firmware:10.1.2:r60p82:*:*:*:*:*:* | 10.1.2 r60p82 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:warp_firmware:10.2.2:r10:*:*:*:*:*:* | 10.2.2 r10 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:warp_firmware:10.2.2:r25:*:*:*:*:*:* | 10.2.2 r25 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:warp_firmware:10.2.2:r38:*:*:*:*:*:* | 10.2.2 r38 | Vulnerable | FatPipe |
| cpe:2.3:h:fatpipeinc:warp:-:*:*:*:*:*:*:* | not specified by NVD | Running on | FatPipe |
- cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r161p16:*:*:*:*:*:* Versions 9.1.2 r161p16 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r161p17:*:*:*:*:*:* Versions 9.1.2 r161p17 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r161p2:*:*:*:*:*:* Versions 9.1.2 r161p2 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r161p20:*:*:*:*:*:* Versions 9.1.2 r161p20 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r161p26:*:*:*:*:*:* Versions 9.1.2 r161p26 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r161p3:*:*:*:*:*:* Versions 9.1.2 r161p3 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r164:*:*:*:*:*:* Versions 9.1.2 r164 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r164p4:*:*:*:*:*:* Versions 9.1.2 r164p4 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r164p5:*:*:*:*:*:* Versions 9.1.2 r164p5 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r165:*:*:*:*:*:* Versions 9.1.2 r165 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r180p2:*:*:*:*:*:* Versions 9.1.2 r180p2 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r185:*:*:*:*:*:* Versions 9.1.2 r185 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.1.2:r60p10:*:*:*:*:*:* Versions 10.1.2 r60p10 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.1.2:r60p13:*:*:*:*:*:* Versions 10.1.2 r60p13 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.1.2:r60p32:*:*:*:*:*:* Versions 10.1.2 r60p32 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.1.2:r60p35:*:*:*:*:*:* Versions 10.1.2 r60p35 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.1.2:r60p45:*:*:*:*:*:* Versions 10.1.2 r60p45 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.1.2:r60p55:*:*:*:*:*:* Versions 10.1.2 r60p55 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.1.2:r60p58:*:*:*:*:*:* Versions 10.1.2 r60p58 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.1.2:r60p58s1:*:*:*:*:*:* Versions 10.1.2 r60p58s1 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.1.2:r60p65:*:*:*:*:*:* Versions 10.1.2 r60p65 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.1.2:r60p71:*:*:*:*:*:* Versions 10.1.2 r60p71 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.1.2:r60p82:*:*:*:*:*:* Versions 10.1.2 r60p82 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.2.2:r10:*:*:*:*:*:* Versions 10.2.2 r10 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.2.2:r25:*:*:*:*:*:* Versions 10.2.2 r25 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.2.2:r38:*:*:*:*:*:* Versions 10.2.2 r38 Vulnerable ·FatPipe
- cpe:2.3:h:fatpipeinc:ipvpn:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·FatPipe
- cpe:2.3:o:fatpipeinc:mpvpn_firmware:5.2.0:r34:*:*:*:*:*:* Versions 5.2.0 r34 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:mpvpn_firmware:6.1.2:r70p26:*:*:*:*:*:* Versions 6.1.2 r70p26 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:mpvpn_firmware:6.1.2:r70p45-m:*:*:*:*:*:* Versions 6.1.2 r70p45-m Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:mpvpn_firmware:6.1.2:r70p75-m:*:*:*:*:*:* Versions 6.1.2 r70p75-m Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:mpvpn_firmware:7.1.2:r39:*:*:*:*:*:* Versions 7.1.2 r39 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r129:*:*:*:*:*:* Versions 9.1.2 r129 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r144:*:*:*:*:*:* Versions 9.1.2 r144 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r150:*:*:*:*:*:* Versions 9.1.2 r150 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r156:*:*:*:*:*:* Versions 9.1.2 r156 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r161p12:*:*:*:*:*:* Versions 9.1.2 r161p12 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r161p16:*:*:*:*:*:* Versions 9.1.2 r161p16 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r161p17:*:*:*:*:*:* Versions 9.1.2 r161p17 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r161p2:*:*:*:*:*:* Versions 9.1.2 r161p2 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r161p20:*:*:*:*:*:* Versions 9.1.2 r161p20 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r161p26:*:*:*:*:*:* Versions 9.1.2 r161p26 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r161p3:*:*:*:*:*:* Versions 9.1.2 r161p3 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r164:*:*:*:*:*:* Versions 9.1.2 r164 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r164p4:*:*:*:*:*:* Versions 9.1.2 r164p4 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r164p5:*:*:*:*:*:* Versions 9.1.2 r164p5 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r165:*:*:*:*:*:* Versions 9.1.2 r165 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r180p2:*:*:*:*:*:* Versions 9.1.2 r180p2 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r185:*:*:*:*:*:* Versions 9.1.2 r185 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.1.2:r60p10:*:*:*:*:*:* Versions 10.1.2 r60p10 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.1.2:r60p13:*:*:*:*:*:* Versions 10.1.2 r60p13 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.1.2:r60p32:*:*:*:*:*:* Versions 10.1.2 r60p32 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.1.2:r60p35:*:*:*:*:*:* Versions 10.1.2 r60p35 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.1.2:r60p45:*:*:*:*:*:* Versions 10.1.2 r60p45 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.1.2:r60p55:*:*:*:*:*:* Versions 10.1.2 r60p55 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.1.2:r60p58:*:*:*:*:*:* Versions 10.1.2 r60p58 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.1.2:r60p58s1:*:*:*:*:*:* Versions 10.1.2 r60p58s1 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.1.2:r60p65:*:*:*:*:*:* Versions 10.1.2 r60p65 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.1.2:r60p71:*:*:*:*:*:* Versions 10.1.2 r60p71 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.1.2:r60p82:*:*:*:*:*:* Versions 10.1.2 r60p82 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.2.2:r10:*:*:*:*:*:* Versions 10.2.2 r10 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.2.2:r25:*:*:*:*:*:* Versions 10.2.2 r25 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.2.2:r38:*:*:*:*:*:* Versions 10.2.2 r38 Vulnerable ·FatPipe
- cpe:2.3:h:fatpipeinc:mpvpn:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·FatPipe
- cpe:2.3:o:fatpipeinc:warp_firmware:5.2.0:r34:*:*:*:*:*:* Versions 5.2.0 r34 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:warp_firmware:6.1.2:r70p26:*:*:*:*:*:* Versions 6.1.2 r70p26 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:warp_firmware:6.1.2:r70p45-m:*:*:*:*:*:* Versions 6.1.2 r70p45-m Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:warp_firmware:6.1.2:r70p75-m:*:*:*:*:*:* Versions 6.1.2 r70p75-m Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:warp_firmware:7.1.2:r39:*:*:*:*:*:* Versions 7.1.2 r39 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r129:*:*:*:*:*:* Versions 9.1.2 r129 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r144:*:*:*:*:*:* Versions 9.1.2 r144 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r150:*:*:*:*:*:* Versions 9.1.2 r150 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r156:*:*:*:*:*:* Versions 9.1.2 r156 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r161p12:*:*:*:*:*:* Versions 9.1.2 r161p12 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r161p16:*:*:*:*:*:* Versions 9.1.2 r161p16 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r161p17:*:*:*:*:*:* Versions 9.1.2 r161p17 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r161p2:*:*:*:*:*:* Versions 9.1.2 r161p2 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r161p20:*:*:*:*:*:* Versions 9.1.2 r161p20 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r161p26:*:*:*:*:*:* Versions 9.1.2 r161p26 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r161p3:*:*:*:*:*:* Versions 9.1.2 r161p3 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r164:*:*:*:*:*:* Versions 9.1.2 r164 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r164p4:*:*:*:*:*:* Versions 9.1.2 r164p4 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r164p5:*:*:*:*:*:* Versions 9.1.2 r164p5 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r165:*:*:*:*:*:* Versions 9.1.2 r165 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r180p2:*:*:*:*:*:* Versions 9.1.2 r180p2 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r185:*:*:*:*:*:* Versions 9.1.2 r185 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:warp_firmware:10.1.2:r60p10:*:*:*:*:*:* Versions 10.1.2 r60p10 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:warp_firmware:10.1.2:r60p13:*:*:*:*:*:* Versions 10.1.2 r60p13 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:warp_firmware:10.1.2:r60p32:*:*:*:*:*:* Versions 10.1.2 r60p32 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:warp_firmware:10.1.2:r60p35:*:*:*:*:*:* Versions 10.1.2 r60p35 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:warp_firmware:10.1.2:r60p45:*:*:*:*:*:* Versions 10.1.2 r60p45 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:warp_firmware:10.1.2:r60p55:*:*:*:*:*:* Versions 10.1.2 r60p55 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:warp_firmware:10.1.2:r60p58:*:*:*:*:*:* Versions 10.1.2 r60p58 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:warp_firmware:10.1.2:r60p58s1:*:*:*:*:*:* Versions 10.1.2 r60p58s1 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:warp_firmware:10.1.2:r60p65:*:*:*:*:*:* Versions 10.1.2 r60p65 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:warp_firmware:10.1.2:r60p71:*:*:*:*:*:* Versions 10.1.2 r60p71 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:warp_firmware:10.1.2:r60p82:*:*:*:*:*:* Versions 10.1.2 r60p82 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:warp_firmware:10.2.2:r10:*:*:*:*:*:* Versions 10.2.2 r10 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:warp_firmware:10.2.2:r25:*:*:*:*:*:* Versions 10.2.2 r25 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:warp_firmware:10.2.2:r38:*:*:*:*:*:* Versions 10.2.2 r38 Vulnerable ·FatPipe
- cpe:2.3:h:fatpipeinc:warp:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·FatPipe
Remediation
- Fix · CNA WARP (FatPipe) Fixed in 10.1.2r60p91, 10.2.2r42
- Fix · CNA IPVPN (FatPipe) Fixed in 10.1.2r60p91, 10.2.2r42
- Fix · CNA MPVPN (FatPipe) Fixed in 10.1.2r60p91, 10.2.2r42
Fixed in the same release
Records fixed by the same vendor advisory or release, as the CNA lists them.
- Release ·
FatPipe IPVPN, MPVPN, WARP 10.1.2r60p91, 10.2.2r42
5 records Highest priority Priority MEDIUM 3 MEDIUM, 2 LOW
Other records, highest priority first
- TI-2021-09214 FatPipe software administrative account with no passwordPriority MEDIUM 50
- TI-2021-09217 Missing authorization vulnerability in FatPipe softwarePriority MEDIUM 41
- TI-2021-09213 FatPipe software allows privilege escalationPriority MEDIUM 41
Timeline
- 2026-10-02 Threatist record created from CVE-2021-27857
- 2026-10-03 Alias added: GHSA-wgcg-wpg9-jq43
References
More FatPipe Ipvpn Firmware vulnerabilities
- TI-2021-09218 Arbitrary file upload vulnerability in FatPipe software KEVCVSS 3.1CRITICAL 9.8
- TI-2021-09214 FatPipe software administrative account with no password CVSS 3.1CRITICAL 9.8
- TI-2021-09217 Missing authorization vulnerability in FatPipe software CVSS 3.1HIGH 8.8
- TI-2021-09213 FatPipe software allows privilege escalation CVSS 3.1HIGH 8.8
- TI-2021-09216 Missing authorization vulnerability in FatPipe software CVSS 3.1MEDIUM 5.3
Sources
- CVE-2021-27857 · CVE Program
- CVE-2021-27857 · NVD
- FIRST EPSS
- GHSA-wgcg-wpg9-jq43 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences