Read the docs
TI-2021-09217 Aliases CVE-2021-27859GHSA-fr6w-vm34-xj98

Missing authorization vulnerability in FatPipe software

Priority MEDIUM 41CWE-862Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-862.

Summary

A missing authorization vulnerability in the web management interface of FatPipe WARP, IPVPN, and MPVPN software prior to versions 10.1.2r60p91 and 10.2.2r42 allows an authenticated, remote attacker with read-only privileges to create an account with administrative privileges. Older versions of FatPipe software may also be vulnerable. This does not appear to be a CSRF vulnerability. The FatPipe advisory identifier for this vulnerability is FPSA005.

Why it matters now

EPSS 0.01668 76th percentileScored 2026-11-07
Fix Fixed WARP (FatPipe): 10.1.2r60p91, 10.2.2r42IPVPN (FatPipe): 10.1.2r60p91, 10.2.2r42+1 more product

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
FatPipeWARP10.1 to before 10.1.2r60p91; 10.2 to before 10.2.2r4210.1.2r60p91, 10.2.2r42Patch availableCNA
FatPipeIPVPN10.1 to before 10.1.2r60p91; 10.2 to before 10.2.2r4210.1.2r60p91, 10.2.2r42Patch availableCNA
FatPipeMPVPN10.1 to before 10.1.2r60p91; 10.2 to before 10.2.2r4210.1.2r60p91, 10.2.2r42Patch availableCNA
  • WARP VendorFatPipe Affected 10.1 to before 10.1.2r60p91; 10.2 to before 10.2.2r42 Fixed in 10.1.2r60p91, 10.2.2r42 Patch available CNA
  • IPVPN VendorFatPipe Affected 10.1 to before 10.1.2r60p91; 10.2 to before 10.2.2r42 Fixed in 10.1.2r60p91, 10.2.2r42 Patch available CNA
  • MPVPN VendorFatPipe Affected 10.1 to before 10.1.2r60p91; 10.2 to before 10.2.2r42 Fixed in 10.1.2r60p91, 10.2.2r42 Patch available CNA

CPE configurations NVD · 111

CPEVersionsRoleVendor
cpe:2.3:o:fatpipeinc:ipvpn_firmware:5.2.0:r34:*:*:*:*:*:*5.2.0 r34VulnerableFatPipe
cpe:2.3:o:fatpipeinc:ipvpn_firmware:6.1.2:r70p26:*:*:*:*:*:*6.1.2 r70p26VulnerableFatPipe
cpe:2.3:o:fatpipeinc:ipvpn_firmware:6.1.2:r70p45-m:*:*:*:*:*:*6.1.2 r70p45-mVulnerableFatPipe
cpe:2.3:o:fatpipeinc:ipvpn_firmware:6.1.2:r70p75-m:*:*:*:*:*:*6.1.2 r70p75-mVulnerableFatPipe
cpe:2.3:o:fatpipeinc:ipvpn_firmware:7.1.2:r39:*:*:*:*:*:*7.1.2 r39VulnerableFatPipe
cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r129:*:*:*:*:*:*9.1.2 r129VulnerableFatPipe
cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r144:*:*:*:*:*:*9.1.2 r144VulnerableFatPipe
cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r150:*:*:*:*:*:*9.1.2 r150VulnerableFatPipe
cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r156:*:*:*:*:*:*9.1.2 r156VulnerableFatPipe
cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r161p12:*:*:*:*:*:*9.1.2 r161p12VulnerableFatPipe
  • cpe:2.3:o:fatpipeinc:ipvpn_firmware:5.2.0:r34:*:*:*:*:*:* Versions 5.2.0 r34 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:ipvpn_firmware:6.1.2:r70p26:*:*:*:*:*:* Versions 6.1.2 r70p26 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:ipvpn_firmware:6.1.2:r70p45-m:*:*:*:*:*:* Versions 6.1.2 r70p45-m Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:ipvpn_firmware:6.1.2:r70p75-m:*:*:*:*:*:* Versions 6.1.2 r70p75-m Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:ipvpn_firmware:7.1.2:r39:*:*:*:*:*:* Versions 7.1.2 r39 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r129:*:*:*:*:*:* Versions 9.1.2 r129 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r144:*:*:*:*:*:* Versions 9.1.2 r144 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r150:*:*:*:*:*:* Versions 9.1.2 r150 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r156:*:*:*:*:*:* Versions 9.1.2 r156 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r161p12:*:*:*:*:*:* Versions 9.1.2 r161p12 Vulnerable ·FatPipe
Show 101 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r161p16:*:*:*:*:*:*9.1.2 r161p16VulnerableFatPipe
cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r161p17:*:*:*:*:*:*9.1.2 r161p17VulnerableFatPipe
cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r161p2:*:*:*:*:*:*9.1.2 r161p2VulnerableFatPipe
cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r161p20:*:*:*:*:*:*9.1.2 r161p20VulnerableFatPipe
cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r161p26:*:*:*:*:*:*9.1.2 r161p26VulnerableFatPipe
cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r161p3:*:*:*:*:*:*9.1.2 r161p3VulnerableFatPipe
cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r164:*:*:*:*:*:*9.1.2 r164VulnerableFatPipe
cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r164p4:*:*:*:*:*:*9.1.2 r164p4VulnerableFatPipe
cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r164p5:*:*:*:*:*:*9.1.2 r164p5VulnerableFatPipe
cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r165:*:*:*:*:*:*9.1.2 r165VulnerableFatPipe
cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r180p2:*:*:*:*:*:*9.1.2 r180p2VulnerableFatPipe
cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r185:*:*:*:*:*:*9.1.2 r185VulnerableFatPipe
cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.1.2:r60p10:*:*:*:*:*:*10.1.2 r60p10VulnerableFatPipe
cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.1.2:r60p13:*:*:*:*:*:*10.1.2 r60p13VulnerableFatPipe
cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.1.2:r60p32:*:*:*:*:*:*10.1.2 r60p32VulnerableFatPipe
cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.1.2:r60p35:*:*:*:*:*:*10.1.2 r60p35VulnerableFatPipe
cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.1.2:r60p45:*:*:*:*:*:*10.1.2 r60p45VulnerableFatPipe
cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.1.2:r60p55:*:*:*:*:*:*10.1.2 r60p55VulnerableFatPipe
cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.1.2:r60p58:*:*:*:*:*:*10.1.2 r60p58VulnerableFatPipe
cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.1.2:r60p58s1:*:*:*:*:*:*10.1.2 r60p58s1VulnerableFatPipe
cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.1.2:r60p65:*:*:*:*:*:*10.1.2 r60p65VulnerableFatPipe
cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.1.2:r60p71:*:*:*:*:*:*10.1.2 r60p71VulnerableFatPipe
cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.1.2:r60p82:*:*:*:*:*:*10.1.2 r60p82VulnerableFatPipe
cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.2.2:r10:*:*:*:*:*:*10.2.2 r10VulnerableFatPipe
cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.2.2:r25:*:*:*:*:*:*10.2.2 r25VulnerableFatPipe
cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.2.2:r38:*:*:*:*:*:*10.2.2 r38VulnerableFatPipe
cpe:2.3:h:fatpipeinc:ipvpn:-:*:*:*:*:*:*:*not specified by NVDRunning onFatPipe
cpe:2.3:o:fatpipeinc:mpvpn_firmware:5.2.0:r34:*:*:*:*:*:*5.2.0 r34VulnerableFatPipe
cpe:2.3:o:fatpipeinc:mpvpn_firmware:6.1.2:r70p26:*:*:*:*:*:*6.1.2 r70p26VulnerableFatPipe
cpe:2.3:o:fatpipeinc:mpvpn_firmware:6.1.2:r70p45-m:*:*:*:*:*:*6.1.2 r70p45-mVulnerableFatPipe
cpe:2.3:o:fatpipeinc:mpvpn_firmware:6.1.2:r70p75-m:*:*:*:*:*:*6.1.2 r70p75-mVulnerableFatPipe
cpe:2.3:o:fatpipeinc:mpvpn_firmware:7.1.2:r39:*:*:*:*:*:*7.1.2 r39VulnerableFatPipe
cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r129:*:*:*:*:*:*9.1.2 r129VulnerableFatPipe
cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r144:*:*:*:*:*:*9.1.2 r144VulnerableFatPipe
cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r150:*:*:*:*:*:*9.1.2 r150VulnerableFatPipe
cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r156:*:*:*:*:*:*9.1.2 r156VulnerableFatPipe
cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r161p12:*:*:*:*:*:*9.1.2 r161p12VulnerableFatPipe
cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r161p16:*:*:*:*:*:*9.1.2 r161p16VulnerableFatPipe
cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r161p17:*:*:*:*:*:*9.1.2 r161p17VulnerableFatPipe
cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r161p2:*:*:*:*:*:*9.1.2 r161p2VulnerableFatPipe
cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r161p20:*:*:*:*:*:*9.1.2 r161p20VulnerableFatPipe
cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r161p26:*:*:*:*:*:*9.1.2 r161p26VulnerableFatPipe
cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r161p3:*:*:*:*:*:*9.1.2 r161p3VulnerableFatPipe
cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r164:*:*:*:*:*:*9.1.2 r164VulnerableFatPipe
cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r164p4:*:*:*:*:*:*9.1.2 r164p4VulnerableFatPipe
cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r164p5:*:*:*:*:*:*9.1.2 r164p5VulnerableFatPipe
cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r165:*:*:*:*:*:*9.1.2 r165VulnerableFatPipe
cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r180p2:*:*:*:*:*:*9.1.2 r180p2VulnerableFatPipe
cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r185:*:*:*:*:*:*9.1.2 r185VulnerableFatPipe
cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.1.2:r60p10:*:*:*:*:*:*10.1.2 r60p10VulnerableFatPipe
cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.1.2:r60p13:*:*:*:*:*:*10.1.2 r60p13VulnerableFatPipe
cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.1.2:r60p32:*:*:*:*:*:*10.1.2 r60p32VulnerableFatPipe
cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.1.2:r60p35:*:*:*:*:*:*10.1.2 r60p35VulnerableFatPipe
cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.1.2:r60p45:*:*:*:*:*:*10.1.2 r60p45VulnerableFatPipe
cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.1.2:r60p55:*:*:*:*:*:*10.1.2 r60p55VulnerableFatPipe
cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.1.2:r60p58:*:*:*:*:*:*10.1.2 r60p58VulnerableFatPipe
cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.1.2:r60p58s1:*:*:*:*:*:*10.1.2 r60p58s1VulnerableFatPipe
cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.1.2:r60p65:*:*:*:*:*:*10.1.2 r60p65VulnerableFatPipe
cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.1.2:r60p71:*:*:*:*:*:*10.1.2 r60p71VulnerableFatPipe
cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.1.2:r60p82:*:*:*:*:*:*10.1.2 r60p82VulnerableFatPipe
cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.2.2:r10:*:*:*:*:*:*10.2.2 r10VulnerableFatPipe
cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.2.2:r25:*:*:*:*:*:*10.2.2 r25VulnerableFatPipe
cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.2.2:r38:*:*:*:*:*:*10.2.2 r38VulnerableFatPipe
cpe:2.3:h:fatpipeinc:mpvpn:-:*:*:*:*:*:*:*not specified by NVDRunning onFatPipe
cpe:2.3:o:fatpipeinc:warp_firmware:5.2.0:r34:*:*:*:*:*:*5.2.0 r34VulnerableFatPipe
cpe:2.3:o:fatpipeinc:warp_firmware:6.1.2:r70p26:*:*:*:*:*:*6.1.2 r70p26VulnerableFatPipe
cpe:2.3:o:fatpipeinc:warp_firmware:6.1.2:r70p45-m:*:*:*:*:*:*6.1.2 r70p45-mVulnerableFatPipe
cpe:2.3:o:fatpipeinc:warp_firmware:6.1.2:r70p75-m:*:*:*:*:*:*6.1.2 r70p75-mVulnerableFatPipe
cpe:2.3:o:fatpipeinc:warp_firmware:7.1.2:r39:*:*:*:*:*:*7.1.2 r39VulnerableFatPipe
cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r129:*:*:*:*:*:*9.1.2 r129VulnerableFatPipe
cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r144:*:*:*:*:*:*9.1.2 r144VulnerableFatPipe
cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r150:*:*:*:*:*:*9.1.2 r150VulnerableFatPipe
cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r156:*:*:*:*:*:*9.1.2 r156VulnerableFatPipe
cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r161p12:*:*:*:*:*:*9.1.2 r161p12VulnerableFatPipe
cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r161p16:*:*:*:*:*:*9.1.2 r161p16VulnerableFatPipe
cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r161p17:*:*:*:*:*:*9.1.2 r161p17VulnerableFatPipe
cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r161p2:*:*:*:*:*:*9.1.2 r161p2VulnerableFatPipe
cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r161p20:*:*:*:*:*:*9.1.2 r161p20VulnerableFatPipe
cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r161p26:*:*:*:*:*:*9.1.2 r161p26VulnerableFatPipe
cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r161p3:*:*:*:*:*:*9.1.2 r161p3VulnerableFatPipe
cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r164:*:*:*:*:*:*9.1.2 r164VulnerableFatPipe
cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r164p4:*:*:*:*:*:*9.1.2 r164p4VulnerableFatPipe
cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r164p5:*:*:*:*:*:*9.1.2 r164p5VulnerableFatPipe
cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r165:*:*:*:*:*:*9.1.2 r165VulnerableFatPipe
cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r180p2:*:*:*:*:*:*9.1.2 r180p2VulnerableFatPipe
cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r185:*:*:*:*:*:*9.1.2 r185VulnerableFatPipe
cpe:2.3:o:fatpipeinc:warp_firmware:10.1.2:r60p10:*:*:*:*:*:*10.1.2 r60p10VulnerableFatPipe
cpe:2.3:o:fatpipeinc:warp_firmware:10.1.2:r60p13:*:*:*:*:*:*10.1.2 r60p13VulnerableFatPipe
cpe:2.3:o:fatpipeinc:warp_firmware:10.1.2:r60p32:*:*:*:*:*:*10.1.2 r60p32VulnerableFatPipe
cpe:2.3:o:fatpipeinc:warp_firmware:10.1.2:r60p35:*:*:*:*:*:*10.1.2 r60p35VulnerableFatPipe
cpe:2.3:o:fatpipeinc:warp_firmware:10.1.2:r60p45:*:*:*:*:*:*10.1.2 r60p45VulnerableFatPipe
cpe:2.3:o:fatpipeinc:warp_firmware:10.1.2:r60p55:*:*:*:*:*:*10.1.2 r60p55VulnerableFatPipe
cpe:2.3:o:fatpipeinc:warp_firmware:10.1.2:r60p58:*:*:*:*:*:*10.1.2 r60p58VulnerableFatPipe
cpe:2.3:o:fatpipeinc:warp_firmware:10.1.2:r60p58s1:*:*:*:*:*:*10.1.2 r60p58s1VulnerableFatPipe
cpe:2.3:o:fatpipeinc:warp_firmware:10.1.2:r60p65:*:*:*:*:*:*10.1.2 r60p65VulnerableFatPipe
cpe:2.3:o:fatpipeinc:warp_firmware:10.1.2:r60p71:*:*:*:*:*:*10.1.2 r60p71VulnerableFatPipe
cpe:2.3:o:fatpipeinc:warp_firmware:10.1.2:r60p82:*:*:*:*:*:*10.1.2 r60p82VulnerableFatPipe
cpe:2.3:o:fatpipeinc:warp_firmware:10.2.2:r10:*:*:*:*:*:*10.2.2 r10VulnerableFatPipe
cpe:2.3:o:fatpipeinc:warp_firmware:10.2.2:r25:*:*:*:*:*:*10.2.2 r25VulnerableFatPipe
cpe:2.3:o:fatpipeinc:warp_firmware:10.2.2:r38:*:*:*:*:*:*10.2.2 r38VulnerableFatPipe
cpe:2.3:h:fatpipeinc:warp:-:*:*:*:*:*:*:*not specified by NVDRunning onFatPipe
  • cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r161p16:*:*:*:*:*:* Versions 9.1.2 r161p16 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r161p17:*:*:*:*:*:* Versions 9.1.2 r161p17 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r161p2:*:*:*:*:*:* Versions 9.1.2 r161p2 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r161p20:*:*:*:*:*:* Versions 9.1.2 r161p20 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r161p26:*:*:*:*:*:* Versions 9.1.2 r161p26 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r161p3:*:*:*:*:*:* Versions 9.1.2 r161p3 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r164:*:*:*:*:*:* Versions 9.1.2 r164 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r164p4:*:*:*:*:*:* Versions 9.1.2 r164p4 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r164p5:*:*:*:*:*:* Versions 9.1.2 r164p5 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r165:*:*:*:*:*:* Versions 9.1.2 r165 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r180p2:*:*:*:*:*:* Versions 9.1.2 r180p2 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r185:*:*:*:*:*:* Versions 9.1.2 r185 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.1.2:r60p10:*:*:*:*:*:* Versions 10.1.2 r60p10 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.1.2:r60p13:*:*:*:*:*:* Versions 10.1.2 r60p13 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.1.2:r60p32:*:*:*:*:*:* Versions 10.1.2 r60p32 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.1.2:r60p35:*:*:*:*:*:* Versions 10.1.2 r60p35 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.1.2:r60p45:*:*:*:*:*:* Versions 10.1.2 r60p45 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.1.2:r60p55:*:*:*:*:*:* Versions 10.1.2 r60p55 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.1.2:r60p58:*:*:*:*:*:* Versions 10.1.2 r60p58 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.1.2:r60p58s1:*:*:*:*:*:* Versions 10.1.2 r60p58s1 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.1.2:r60p65:*:*:*:*:*:* Versions 10.1.2 r60p65 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.1.2:r60p71:*:*:*:*:*:* Versions 10.1.2 r60p71 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.1.2:r60p82:*:*:*:*:*:* Versions 10.1.2 r60p82 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.2.2:r10:*:*:*:*:*:* Versions 10.2.2 r10 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.2.2:r25:*:*:*:*:*:* Versions 10.2.2 r25 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.2.2:r38:*:*:*:*:*:* Versions 10.2.2 r38 Vulnerable ·FatPipe
  • cpe:2.3:h:fatpipeinc:ipvpn:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·FatPipe
  • cpe:2.3:o:fatpipeinc:mpvpn_firmware:5.2.0:r34:*:*:*:*:*:* Versions 5.2.0 r34 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:mpvpn_firmware:6.1.2:r70p26:*:*:*:*:*:* Versions 6.1.2 r70p26 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:mpvpn_firmware:6.1.2:r70p45-m:*:*:*:*:*:* Versions 6.1.2 r70p45-m Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:mpvpn_firmware:6.1.2:r70p75-m:*:*:*:*:*:* Versions 6.1.2 r70p75-m Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:mpvpn_firmware:7.1.2:r39:*:*:*:*:*:* Versions 7.1.2 r39 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r129:*:*:*:*:*:* Versions 9.1.2 r129 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r144:*:*:*:*:*:* Versions 9.1.2 r144 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r150:*:*:*:*:*:* Versions 9.1.2 r150 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r156:*:*:*:*:*:* Versions 9.1.2 r156 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r161p12:*:*:*:*:*:* Versions 9.1.2 r161p12 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r161p16:*:*:*:*:*:* Versions 9.1.2 r161p16 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r161p17:*:*:*:*:*:* Versions 9.1.2 r161p17 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r161p2:*:*:*:*:*:* Versions 9.1.2 r161p2 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r161p20:*:*:*:*:*:* Versions 9.1.2 r161p20 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r161p26:*:*:*:*:*:* Versions 9.1.2 r161p26 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r161p3:*:*:*:*:*:* Versions 9.1.2 r161p3 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r164:*:*:*:*:*:* Versions 9.1.2 r164 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r164p4:*:*:*:*:*:* Versions 9.1.2 r164p4 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r164p5:*:*:*:*:*:* Versions 9.1.2 r164p5 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r165:*:*:*:*:*:* Versions 9.1.2 r165 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r180p2:*:*:*:*:*:* Versions 9.1.2 r180p2 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r185:*:*:*:*:*:* Versions 9.1.2 r185 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.1.2:r60p10:*:*:*:*:*:* Versions 10.1.2 r60p10 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.1.2:r60p13:*:*:*:*:*:* Versions 10.1.2 r60p13 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.1.2:r60p32:*:*:*:*:*:* Versions 10.1.2 r60p32 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.1.2:r60p35:*:*:*:*:*:* Versions 10.1.2 r60p35 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.1.2:r60p45:*:*:*:*:*:* Versions 10.1.2 r60p45 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.1.2:r60p55:*:*:*:*:*:* Versions 10.1.2 r60p55 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.1.2:r60p58:*:*:*:*:*:* Versions 10.1.2 r60p58 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.1.2:r60p58s1:*:*:*:*:*:* Versions 10.1.2 r60p58s1 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.1.2:r60p65:*:*:*:*:*:* Versions 10.1.2 r60p65 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.1.2:r60p71:*:*:*:*:*:* Versions 10.1.2 r60p71 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.1.2:r60p82:*:*:*:*:*:* Versions 10.1.2 r60p82 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.2.2:r10:*:*:*:*:*:* Versions 10.2.2 r10 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.2.2:r25:*:*:*:*:*:* Versions 10.2.2 r25 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.2.2:r38:*:*:*:*:*:* Versions 10.2.2 r38 Vulnerable ·FatPipe
  • cpe:2.3:h:fatpipeinc:mpvpn:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·FatPipe
  • cpe:2.3:o:fatpipeinc:warp_firmware:5.2.0:r34:*:*:*:*:*:* Versions 5.2.0 r34 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:warp_firmware:6.1.2:r70p26:*:*:*:*:*:* Versions 6.1.2 r70p26 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:warp_firmware:6.1.2:r70p45-m:*:*:*:*:*:* Versions 6.1.2 r70p45-m Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:warp_firmware:6.1.2:r70p75-m:*:*:*:*:*:* Versions 6.1.2 r70p75-m Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:warp_firmware:7.1.2:r39:*:*:*:*:*:* Versions 7.1.2 r39 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r129:*:*:*:*:*:* Versions 9.1.2 r129 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r144:*:*:*:*:*:* Versions 9.1.2 r144 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r150:*:*:*:*:*:* Versions 9.1.2 r150 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r156:*:*:*:*:*:* Versions 9.1.2 r156 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r161p12:*:*:*:*:*:* Versions 9.1.2 r161p12 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r161p16:*:*:*:*:*:* Versions 9.1.2 r161p16 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r161p17:*:*:*:*:*:* Versions 9.1.2 r161p17 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r161p2:*:*:*:*:*:* Versions 9.1.2 r161p2 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r161p20:*:*:*:*:*:* Versions 9.1.2 r161p20 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r161p26:*:*:*:*:*:* Versions 9.1.2 r161p26 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r161p3:*:*:*:*:*:* Versions 9.1.2 r161p3 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r164:*:*:*:*:*:* Versions 9.1.2 r164 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r164p4:*:*:*:*:*:* Versions 9.1.2 r164p4 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r164p5:*:*:*:*:*:* Versions 9.1.2 r164p5 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r165:*:*:*:*:*:* Versions 9.1.2 r165 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r180p2:*:*:*:*:*:* Versions 9.1.2 r180p2 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r185:*:*:*:*:*:* Versions 9.1.2 r185 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:warp_firmware:10.1.2:r60p10:*:*:*:*:*:* Versions 10.1.2 r60p10 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:warp_firmware:10.1.2:r60p13:*:*:*:*:*:* Versions 10.1.2 r60p13 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:warp_firmware:10.1.2:r60p32:*:*:*:*:*:* Versions 10.1.2 r60p32 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:warp_firmware:10.1.2:r60p35:*:*:*:*:*:* Versions 10.1.2 r60p35 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:warp_firmware:10.1.2:r60p45:*:*:*:*:*:* Versions 10.1.2 r60p45 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:warp_firmware:10.1.2:r60p55:*:*:*:*:*:* Versions 10.1.2 r60p55 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:warp_firmware:10.1.2:r60p58:*:*:*:*:*:* Versions 10.1.2 r60p58 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:warp_firmware:10.1.2:r60p58s1:*:*:*:*:*:* Versions 10.1.2 r60p58s1 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:warp_firmware:10.1.2:r60p65:*:*:*:*:*:* Versions 10.1.2 r60p65 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:warp_firmware:10.1.2:r60p71:*:*:*:*:*:* Versions 10.1.2 r60p71 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:warp_firmware:10.1.2:r60p82:*:*:*:*:*:* Versions 10.1.2 r60p82 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:warp_firmware:10.2.2:r10:*:*:*:*:*:* Versions 10.2.2 r10 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:warp_firmware:10.2.2:r25:*:*:*:*:*:* Versions 10.2.2 r25 Vulnerable ·FatPipe
  • cpe:2.3:o:fatpipeinc:warp_firmware:10.2.2:r38:*:*:*:*:*:* Versions 10.2.2 r38 Vulnerable ·FatPipe
  • cpe:2.3:h:fatpipeinc:warp:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·FatPipe

Remediation

  • Fix · CNA WARP (FatPipe) Fixed in 10.1.2r60p91, 10.2.2r42
  • Fix · CNA IPVPN (FatPipe) Fixed in 10.1.2r60p91, 10.2.2r42
  • Fix · CNA MPVPN (FatPipe) Fixed in 10.1.2r60p91, 10.2.2r42

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    FatPipe IPVPN, MPVPN, WARP 10.1.2r60p91, 10.2.2r42

    5 records Highest priority Priority MEDIUM 3 MEDIUM, 2 LOW

    Other records, highest priority first

    • TI-2021-09214 FatPipe software administrative account with no passwordPriority MEDIUM 50
    • TI-2021-09213 FatPipe software allows privilege escalationPriority MEDIUM 41
    • TI-2021-09215 FatPipe software allows unauthenticated configuration downloadPriority LOW 37
    Show all 5 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2021-27859
  2. 2026-10-03 Alias added: GHSA-fr6w-vm34-xj98

References

Advisory 3

  • TI-2021-09218 Arbitrary file upload vulnerability in FatPipe software KEVCVSS 3.1CRITICAL 9.8
  • TI-2021-09214 FatPipe software administrative account with no password CVSS 3.1CRITICAL 9.8
  • TI-2021-09213 FatPipe software allows privilege escalation CVSS 3.1HIGH 8.8
  • TI-2021-09215 FatPipe software allows unauthenticated configuration download CVSS 3.1HIGH 7.5
  • TI-2021-09216 Missing authorization vulnerability in FatPipe software CVSS 3.1MEDIUM 5.3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences