Arbitrary file upload vulnerability in FatPipe software
Priority CRITICAL 100Exploited in the wildCWE-434Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-434.
Summary
A vulnerability in the web management interface of FatPipe WARP, IPVPN, and MPVPN software prior to versions 10.1.2r60p92 and 10.2.2r44p1 allows a remote, unauthenticated attacker to upload a file to any location on the filesystem. The FatPipe advisory identifier for this vulnerability is FPSA006.
Why it matters now
Exploitation Active In CISA KEV since 2022-01-10CISA due date 2022-01-24
EPSS 0.3968 98th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Fixed WARP (FatPipe): 10.1.2r60p92, 10.2.2r44p1IPVPN (FatPipe): 10.1.2r60p92, 10.2.2r44p1+1 more product
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- Active
- Automatable
- Yes
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| FatPipe | WARP | 10.1 to before 10.1.2r60p92; 10.2 to before 10.2.2r44p1 | 10.1.2r60p92, 10.2.2r44p1 | Patch available | CNA |
| FatPipe | IPVPN | 10.1 to before 10.1.2r60p92; 10.2 to before 10.2.2r44p1 | 10.1.2r60p92, 10.2.2r44p1 | Patch available | CNA |
| FatPipe | MPVPN | 10.1 to before 10.1.2r60p92; 10.2 to before 10.2.2r44p1 | 10.1.2r60p92, 10.2.2r44p1 | Patch available | CNA |
- WARP VendorFatPipe Affected 10.1 to before 10.1.2r60p92; 10.2 to before 10.2.2r44p1 Fixed in 10.1.2r60p92, 10.2.2r44p1 Patch available CNA
- IPVPN VendorFatPipe Affected 10.1 to before 10.1.2r60p92; 10.2 to before 10.2.2r44p1 Fixed in 10.1.2r60p92, 10.2.2r44p1 Patch available CNA
- MPVPN VendorFatPipe Affected 10.1 to before 10.1.2r60p92; 10.2 to before 10.2.2r44p1 Fixed in 10.1.2r60p92, 10.2.2r44p1 Patch available CNA
CPE configurations NVD · 111
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:fatpipeinc:ipvpn_firmware:5.2.0:r34:*:*:*:*:*:* | 5.2.0 r34 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:ipvpn_firmware:6.1.2:r70p26:*:*:*:*:*:* | 6.1.2 r70p26 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:ipvpn_firmware:6.1.2:r70p45-m:*:*:*:*:*:* | 6.1.2 r70p45-m | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:ipvpn_firmware:6.1.2:r70p75-m:*:*:*:*:*:* | 6.1.2 r70p75-m | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:ipvpn_firmware:7.1.2:r39:*:*:*:*:*:* | 7.1.2 r39 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r129:*:*:*:*:*:* | 9.1.2 r129 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r144:*:*:*:*:*:* | 9.1.2 r144 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r150:*:*:*:*:*:* | 9.1.2 r150 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r156:*:*:*:*:*:* | 9.1.2 r156 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r161p12:*:*:*:*:*:* | 9.1.2 r161p12 | Vulnerable | FatPipe |
- cpe:2.3:o:fatpipeinc:ipvpn_firmware:5.2.0:r34:*:*:*:*:*:* Versions 5.2.0 r34 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:ipvpn_firmware:6.1.2:r70p26:*:*:*:*:*:* Versions 6.1.2 r70p26 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:ipvpn_firmware:6.1.2:r70p45-m:*:*:*:*:*:* Versions 6.1.2 r70p45-m Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:ipvpn_firmware:6.1.2:r70p75-m:*:*:*:*:*:* Versions 6.1.2 r70p75-m Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:ipvpn_firmware:7.1.2:r39:*:*:*:*:*:* Versions 7.1.2 r39 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r129:*:*:*:*:*:* Versions 9.1.2 r129 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r144:*:*:*:*:*:* Versions 9.1.2 r144 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r150:*:*:*:*:*:* Versions 9.1.2 r150 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r156:*:*:*:*:*:* Versions 9.1.2 r156 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r161p12:*:*:*:*:*:* Versions 9.1.2 r161p12 Vulnerable ·FatPipe
Show 101 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r161p16:*:*:*:*:*:* | 9.1.2 r161p16 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r161p17:*:*:*:*:*:* | 9.1.2 r161p17 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r161p2:*:*:*:*:*:* | 9.1.2 r161p2 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r161p20:*:*:*:*:*:* | 9.1.2 r161p20 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r161p26:*:*:*:*:*:* | 9.1.2 r161p26 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r161p3:*:*:*:*:*:* | 9.1.2 r161p3 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r164:*:*:*:*:*:* | 9.1.2 r164 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r164p4:*:*:*:*:*:* | 9.1.2 r164p4 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r164p5:*:*:*:*:*:* | 9.1.2 r164p5 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r165:*:*:*:*:*:* | 9.1.2 r165 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r180p2:*:*:*:*:*:* | 9.1.2 r180p2 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r185:*:*:*:*:*:* | 9.1.2 r185 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.1.2:r60p10:*:*:*:*:*:* | 10.1.2 r60p10 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.1.2:r60p13:*:*:*:*:*:* | 10.1.2 r60p13 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.1.2:r60p32:*:*:*:*:*:* | 10.1.2 r60p32 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.1.2:r60p35:*:*:*:*:*:* | 10.1.2 r60p35 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.1.2:r60p45:*:*:*:*:*:* | 10.1.2 r60p45 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.1.2:r60p55:*:*:*:*:*:* | 10.1.2 r60p55 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.1.2:r60p58:*:*:*:*:*:* | 10.1.2 r60p58 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.1.2:r60p58s1:*:*:*:*:*:* | 10.1.2 r60p58s1 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.1.2:r60p65:*:*:*:*:*:* | 10.1.2 r60p65 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.1.2:r60p71:*:*:*:*:*:* | 10.1.2 r60p71 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.1.2:r60p82:*:*:*:*:*:* | 10.1.2 r60p82 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.2.2:r10:*:*:*:*:*:* | 10.2.2 r10 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.2.2:r25:*:*:*:*:*:* | 10.2.2 r25 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.2.2:r38:*:*:*:*:*:* | 10.2.2 r38 | Vulnerable | FatPipe |
| cpe:2.3:h:fatpipeinc:ipvpn:-:*:*:*:*:*:*:* | not specified by NVD | Running on | FatPipe |
| cpe:2.3:o:fatpipeinc:warp_firmware:5.2.0:r34:*:*:*:*:*:* | 5.2.0 r34 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:warp_firmware:6.1.2:r70p26:*:*:*:*:*:* | 6.1.2 r70p26 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:warp_firmware:6.1.2:r70p45-m:*:*:*:*:*:* | 6.1.2 r70p45-m | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:warp_firmware:6.1.2:r70p75-m:*:*:*:*:*:* | 6.1.2 r70p75-m | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:warp_firmware:7.1.2:r39:*:*:*:*:*:* | 7.1.2 r39 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r129:*:*:*:*:*:* | 9.1.2 r129 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r144:*:*:*:*:*:* | 9.1.2 r144 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r150:*:*:*:*:*:* | 9.1.2 r150 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r156:*:*:*:*:*:* | 9.1.2 r156 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r161p12:*:*:*:*:*:* | 9.1.2 r161p12 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r161p16:*:*:*:*:*:* | 9.1.2 r161p16 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r161p17:*:*:*:*:*:* | 9.1.2 r161p17 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r161p2:*:*:*:*:*:* | 9.1.2 r161p2 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r161p20:*:*:*:*:*:* | 9.1.2 r161p20 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r161p26:*:*:*:*:*:* | 9.1.2 r161p26 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r161p3:*:*:*:*:*:* | 9.1.2 r161p3 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r164:*:*:*:*:*:* | 9.1.2 r164 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r164p4:*:*:*:*:*:* | 9.1.2 r164p4 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r164p5:*:*:*:*:*:* | 9.1.2 r164p5 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r165:*:*:*:*:*:* | 9.1.2 r165 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r180p2:*:*:*:*:*:* | 9.1.2 r180p2 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r185:*:*:*:*:*:* | 9.1.2 r185 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:warp_firmware:10.1.2:r60p10:*:*:*:*:*:* | 10.1.2 r60p10 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:warp_firmware:10.1.2:r60p13:*:*:*:*:*:* | 10.1.2 r60p13 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:warp_firmware:10.1.2:r60p32:*:*:*:*:*:* | 10.1.2 r60p32 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:warp_firmware:10.1.2:r60p35:*:*:*:*:*:* | 10.1.2 r60p35 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:warp_firmware:10.1.2:r60p45:*:*:*:*:*:* | 10.1.2 r60p45 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:warp_firmware:10.1.2:r60p55:*:*:*:*:*:* | 10.1.2 r60p55 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:warp_firmware:10.1.2:r60p58:*:*:*:*:*:* | 10.1.2 r60p58 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:warp_firmware:10.1.2:r60p58s1:*:*:*:*:*:* | 10.1.2 r60p58s1 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:warp_firmware:10.1.2:r60p65:*:*:*:*:*:* | 10.1.2 r60p65 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:warp_firmware:10.1.2:r60p71:*:*:*:*:*:* | 10.1.2 r60p71 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:warp_firmware:10.1.2:r60p82:*:*:*:*:*:* | 10.1.2 r60p82 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:warp_firmware:10.2.2:r10:*:*:*:*:*:* | 10.2.2 r10 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:warp_firmware:10.2.2:r25:*:*:*:*:*:* | 10.2.2 r25 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:warp_firmware:10.2.2:r38:*:*:*:*:*:* | 10.2.2 r38 | Vulnerable | FatPipe |
| cpe:2.3:h:fatpipeinc:warp:-:*:*:*:*:*:*:* | not specified by NVD | Running on | FatPipe |
| cpe:2.3:o:fatpipeinc:mpvpn_firmware:5.2.0:r34:*:*:*:*:*:* | 5.2.0 r34 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:mpvpn_firmware:6.1.2:r70p26:*:*:*:*:*:* | 6.1.2 r70p26 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:mpvpn_firmware:6.1.2:r70p45-m:*:*:*:*:*:* | 6.1.2 r70p45-m | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:mpvpn_firmware:6.1.2:r70p75-m:*:*:*:*:*:* | 6.1.2 r70p75-m | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:mpvpn_firmware:7.1.2:r39:*:*:*:*:*:* | 7.1.2 r39 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r129:*:*:*:*:*:* | 9.1.2 r129 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r144:*:*:*:*:*:* | 9.1.2 r144 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r150:*:*:*:*:*:* | 9.1.2 r150 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r156:*:*:*:*:*:* | 9.1.2 r156 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r161p12:*:*:*:*:*:* | 9.1.2 r161p12 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r161p16:*:*:*:*:*:* | 9.1.2 r161p16 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r161p17:*:*:*:*:*:* | 9.1.2 r161p17 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r161p2:*:*:*:*:*:* | 9.1.2 r161p2 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r161p20:*:*:*:*:*:* | 9.1.2 r161p20 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r161p26:*:*:*:*:*:* | 9.1.2 r161p26 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r161p3:*:*:*:*:*:* | 9.1.2 r161p3 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r164:*:*:*:*:*:* | 9.1.2 r164 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r164p4:*:*:*:*:*:* | 9.1.2 r164p4 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r164p5:*:*:*:*:*:* | 9.1.2 r164p5 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r165:*:*:*:*:*:* | 9.1.2 r165 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r180p2:*:*:*:*:*:* | 9.1.2 r180p2 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r185:*:*:*:*:*:* | 9.1.2 r185 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.1.2:r60p10:*:*:*:*:*:* | 10.1.2 r60p10 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.1.2:r60p13:*:*:*:*:*:* | 10.1.2 r60p13 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.1.2:r60p32:*:*:*:*:*:* | 10.1.2 r60p32 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.1.2:r60p35:*:*:*:*:*:* | 10.1.2 r60p35 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.1.2:r60p45:*:*:*:*:*:* | 10.1.2 r60p45 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.1.2:r60p55:*:*:*:*:*:* | 10.1.2 r60p55 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.1.2:r60p58:*:*:*:*:*:* | 10.1.2 r60p58 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.1.2:r60p58s1:*:*:*:*:*:* | 10.1.2 r60p58s1 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.1.2:r60p65:*:*:*:*:*:* | 10.1.2 r60p65 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.1.2:r60p71:*:*:*:*:*:* | 10.1.2 r60p71 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.1.2:r60p82:*:*:*:*:*:* | 10.1.2 r60p82 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.2.2:r10:*:*:*:*:*:* | 10.2.2 r10 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.2.2:r25:*:*:*:*:*:* | 10.2.2 r25 | Vulnerable | FatPipe |
| cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.2.2:r38:*:*:*:*:*:* | 10.2.2 r38 | Vulnerable | FatPipe |
| cpe:2.3:h:fatpipeinc:mpvpn:-:*:*:*:*:*:*:* | not specified by NVD | Running on | FatPipe |
- cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r161p16:*:*:*:*:*:* Versions 9.1.2 r161p16 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r161p17:*:*:*:*:*:* Versions 9.1.2 r161p17 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r161p2:*:*:*:*:*:* Versions 9.1.2 r161p2 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r161p20:*:*:*:*:*:* Versions 9.1.2 r161p20 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r161p26:*:*:*:*:*:* Versions 9.1.2 r161p26 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r161p3:*:*:*:*:*:* Versions 9.1.2 r161p3 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r164:*:*:*:*:*:* Versions 9.1.2 r164 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r164p4:*:*:*:*:*:* Versions 9.1.2 r164p4 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r164p5:*:*:*:*:*:* Versions 9.1.2 r164p5 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r165:*:*:*:*:*:* Versions 9.1.2 r165 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r180p2:*:*:*:*:*:* Versions 9.1.2 r180p2 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r185:*:*:*:*:*:* Versions 9.1.2 r185 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.1.2:r60p10:*:*:*:*:*:* Versions 10.1.2 r60p10 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.1.2:r60p13:*:*:*:*:*:* Versions 10.1.2 r60p13 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.1.2:r60p32:*:*:*:*:*:* Versions 10.1.2 r60p32 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.1.2:r60p35:*:*:*:*:*:* Versions 10.1.2 r60p35 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.1.2:r60p45:*:*:*:*:*:* Versions 10.1.2 r60p45 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.1.2:r60p55:*:*:*:*:*:* Versions 10.1.2 r60p55 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.1.2:r60p58:*:*:*:*:*:* Versions 10.1.2 r60p58 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.1.2:r60p58s1:*:*:*:*:*:* Versions 10.1.2 r60p58s1 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.1.2:r60p65:*:*:*:*:*:* Versions 10.1.2 r60p65 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.1.2:r60p71:*:*:*:*:*:* Versions 10.1.2 r60p71 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.1.2:r60p82:*:*:*:*:*:* Versions 10.1.2 r60p82 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.2.2:r10:*:*:*:*:*:* Versions 10.2.2 r10 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.2.2:r25:*:*:*:*:*:* Versions 10.2.2 r25 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.2.2:r38:*:*:*:*:*:* Versions 10.2.2 r38 Vulnerable ·FatPipe
- cpe:2.3:h:fatpipeinc:ipvpn:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·FatPipe
- cpe:2.3:o:fatpipeinc:warp_firmware:5.2.0:r34:*:*:*:*:*:* Versions 5.2.0 r34 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:warp_firmware:6.1.2:r70p26:*:*:*:*:*:* Versions 6.1.2 r70p26 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:warp_firmware:6.1.2:r70p45-m:*:*:*:*:*:* Versions 6.1.2 r70p45-m Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:warp_firmware:6.1.2:r70p75-m:*:*:*:*:*:* Versions 6.1.2 r70p75-m Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:warp_firmware:7.1.2:r39:*:*:*:*:*:* Versions 7.1.2 r39 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r129:*:*:*:*:*:* Versions 9.1.2 r129 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r144:*:*:*:*:*:* Versions 9.1.2 r144 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r150:*:*:*:*:*:* Versions 9.1.2 r150 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r156:*:*:*:*:*:* Versions 9.1.2 r156 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r161p12:*:*:*:*:*:* Versions 9.1.2 r161p12 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r161p16:*:*:*:*:*:* Versions 9.1.2 r161p16 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r161p17:*:*:*:*:*:* Versions 9.1.2 r161p17 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r161p2:*:*:*:*:*:* Versions 9.1.2 r161p2 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r161p20:*:*:*:*:*:* Versions 9.1.2 r161p20 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r161p26:*:*:*:*:*:* Versions 9.1.2 r161p26 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r161p3:*:*:*:*:*:* Versions 9.1.2 r161p3 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r164:*:*:*:*:*:* Versions 9.1.2 r164 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r164p4:*:*:*:*:*:* Versions 9.1.2 r164p4 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r164p5:*:*:*:*:*:* Versions 9.1.2 r164p5 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r165:*:*:*:*:*:* Versions 9.1.2 r165 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r180p2:*:*:*:*:*:* Versions 9.1.2 r180p2 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r185:*:*:*:*:*:* Versions 9.1.2 r185 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:warp_firmware:10.1.2:r60p10:*:*:*:*:*:* Versions 10.1.2 r60p10 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:warp_firmware:10.1.2:r60p13:*:*:*:*:*:* Versions 10.1.2 r60p13 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:warp_firmware:10.1.2:r60p32:*:*:*:*:*:* Versions 10.1.2 r60p32 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:warp_firmware:10.1.2:r60p35:*:*:*:*:*:* Versions 10.1.2 r60p35 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:warp_firmware:10.1.2:r60p45:*:*:*:*:*:* Versions 10.1.2 r60p45 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:warp_firmware:10.1.2:r60p55:*:*:*:*:*:* Versions 10.1.2 r60p55 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:warp_firmware:10.1.2:r60p58:*:*:*:*:*:* Versions 10.1.2 r60p58 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:warp_firmware:10.1.2:r60p58s1:*:*:*:*:*:* Versions 10.1.2 r60p58s1 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:warp_firmware:10.1.2:r60p65:*:*:*:*:*:* Versions 10.1.2 r60p65 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:warp_firmware:10.1.2:r60p71:*:*:*:*:*:* Versions 10.1.2 r60p71 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:warp_firmware:10.1.2:r60p82:*:*:*:*:*:* Versions 10.1.2 r60p82 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:warp_firmware:10.2.2:r10:*:*:*:*:*:* Versions 10.2.2 r10 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:warp_firmware:10.2.2:r25:*:*:*:*:*:* Versions 10.2.2 r25 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:warp_firmware:10.2.2:r38:*:*:*:*:*:* Versions 10.2.2 r38 Vulnerable ·FatPipe
- cpe:2.3:h:fatpipeinc:warp:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·FatPipe
- cpe:2.3:o:fatpipeinc:mpvpn_firmware:5.2.0:r34:*:*:*:*:*:* Versions 5.2.0 r34 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:mpvpn_firmware:6.1.2:r70p26:*:*:*:*:*:* Versions 6.1.2 r70p26 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:mpvpn_firmware:6.1.2:r70p45-m:*:*:*:*:*:* Versions 6.1.2 r70p45-m Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:mpvpn_firmware:6.1.2:r70p75-m:*:*:*:*:*:* Versions 6.1.2 r70p75-m Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:mpvpn_firmware:7.1.2:r39:*:*:*:*:*:* Versions 7.1.2 r39 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r129:*:*:*:*:*:* Versions 9.1.2 r129 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r144:*:*:*:*:*:* Versions 9.1.2 r144 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r150:*:*:*:*:*:* Versions 9.1.2 r150 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r156:*:*:*:*:*:* Versions 9.1.2 r156 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r161p12:*:*:*:*:*:* Versions 9.1.2 r161p12 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r161p16:*:*:*:*:*:* Versions 9.1.2 r161p16 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r161p17:*:*:*:*:*:* Versions 9.1.2 r161p17 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r161p2:*:*:*:*:*:* Versions 9.1.2 r161p2 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r161p20:*:*:*:*:*:* Versions 9.1.2 r161p20 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r161p26:*:*:*:*:*:* Versions 9.1.2 r161p26 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r161p3:*:*:*:*:*:* Versions 9.1.2 r161p3 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r164:*:*:*:*:*:* Versions 9.1.2 r164 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r164p4:*:*:*:*:*:* Versions 9.1.2 r164p4 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r164p5:*:*:*:*:*:* Versions 9.1.2 r164p5 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r165:*:*:*:*:*:* Versions 9.1.2 r165 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r180p2:*:*:*:*:*:* Versions 9.1.2 r180p2 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r185:*:*:*:*:*:* Versions 9.1.2 r185 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.1.2:r60p10:*:*:*:*:*:* Versions 10.1.2 r60p10 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.1.2:r60p13:*:*:*:*:*:* Versions 10.1.2 r60p13 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.1.2:r60p32:*:*:*:*:*:* Versions 10.1.2 r60p32 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.1.2:r60p35:*:*:*:*:*:* Versions 10.1.2 r60p35 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.1.2:r60p45:*:*:*:*:*:* Versions 10.1.2 r60p45 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.1.2:r60p55:*:*:*:*:*:* Versions 10.1.2 r60p55 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.1.2:r60p58:*:*:*:*:*:* Versions 10.1.2 r60p58 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.1.2:r60p58s1:*:*:*:*:*:* Versions 10.1.2 r60p58s1 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.1.2:r60p65:*:*:*:*:*:* Versions 10.1.2 r60p65 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.1.2:r60p71:*:*:*:*:*:* Versions 10.1.2 r60p71 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.1.2:r60p82:*:*:*:*:*:* Versions 10.1.2 r60p82 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.2.2:r10:*:*:*:*:*:* Versions 10.2.2 r10 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.2.2:r25:*:*:*:*:*:* Versions 10.2.2 r25 Vulnerable ·FatPipe
- cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.2.2:r38:*:*:*:*:*:* Versions 10.2.2 r38 Vulnerable ·FatPipe
- cpe:2.3:h:fatpipeinc:mpvpn:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·FatPipe
Remediation
- Fix · CNA WARP (FatPipe) Fixed in 10.1.2r60p92, 10.2.2r44p1
- Fix · CNA IPVPN (FatPipe) Fixed in 10.1.2r60p92, 10.2.2r44p1
- Fix · CNA MPVPN (FatPipe) Fixed in 10.1.2r60p92, 10.2.2r44p1
Timeline
- 2022-01-10 Added to CISA KEV
- 2026-10-02 Threatist record created from CVE-2021-27860
- 2026-10-03 Alias added: GHSA-hfgw-xgjr-v384
References
More FatPipe Ipvpn Firmware vulnerabilities
- TI-2021-09214 FatPipe software administrative account with no password CVSS 3.1CRITICAL 9.8
- TI-2021-09217 Missing authorization vulnerability in FatPipe software CVSS 3.1HIGH 8.8
- TI-2021-09213 FatPipe software allows privilege escalation CVSS 3.1HIGH 8.8
- TI-2021-09215 FatPipe software allows unauthenticated configuration download CVSS 3.1HIGH 7.5
- TI-2021-09216 Missing authorization vulnerability in FatPipe software CVSS 3.1MEDIUM 5.3
Sources
- CVE-2021-27860 · CVE Program
- CVE-2021-27860 · NVD
- CISA Known Exploited Vulnerabilities
- FIRST EPSS
- GHSA-hfgw-xgjr-v384 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences