CVE-2021-27860 : A vulnerability in the web management interface of FatPipe WARP, IPVPN, and MPVP

A vulnerability in the web management interface of FatPipe WARP, IPVPN, and MPVPN software prior to versions 10.1.2r60p92 and 10.2.2r44p1 allows a remote, unauthenticated attacker to upload a file to any location on the filesystem. The FatPipe advisory identifier for this vulnerability is FPSA006.

Published 2021-12-08 17:15:11

Updated 2024-07-24 16:53:08

Source CERT/CC

View at NVD, CVE.org

Products affected by CVE-2021-27860

Fatpipeinc » Ipvpn Firmware » Version: 5.2.0 Update R34
cpe:2.3:o:fatpipeinc:ipvpn_firmware:5.2.0:r34:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Ipvpn » Version: N/A
Fatpipeinc » Ipvpn Firmware » Version: 6.1.2 Update R70p26
cpe:2.3:o:fatpipeinc:ipvpn_firmware:6.1.2:r70p26:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Ipvpn » Version: N/A
Fatpipeinc » Ipvpn Firmware » Version: 6.1.2 Update R70p45-m
cpe:2.3:o:fatpipeinc:ipvpn_firmware:6.1.2:r70p45-m:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Ipvpn » Version: N/A
Fatpipeinc » Ipvpn Firmware » Version: 6.1.2 Update R70p75-m
cpe:2.3:o:fatpipeinc:ipvpn_firmware:6.1.2:r70p75-m:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Ipvpn » Version: N/A
Fatpipeinc » Ipvpn Firmware » Version: 7.1.2 Update R39
cpe:2.3:o:fatpipeinc:ipvpn_firmware:7.1.2:r39:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Ipvpn » Version: N/A
Fatpipeinc » Ipvpn Firmware » Version: 9.1.2 Update R129
cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r129:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Ipvpn » Version: N/A
Fatpipeinc » Ipvpn Firmware » Version: 9.1.2 Update R144
cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r144:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Ipvpn » Version: N/A
Fatpipeinc » Ipvpn Firmware » Version: 9.1.2 Update R150
cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r150:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Ipvpn » Version: N/A
Fatpipeinc » Ipvpn Firmware » Version: 9.1.2 Update R156
cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r156:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Ipvpn » Version: N/A
Fatpipeinc » Ipvpn Firmware » Version: 9.1.2 Update R161p12
cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r161p12:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Ipvpn » Version: N/A
Fatpipeinc » Ipvpn Firmware » Version: 9.1.2 Update R161p16
cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r161p16:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Ipvpn » Version: N/A
Fatpipeinc » Ipvpn Firmware » Version: 9.1.2 Update R161p17
cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r161p17:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Ipvpn » Version: N/A
Fatpipeinc » Ipvpn Firmware » Version: 9.1.2 Update R161p2
cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r161p2:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Ipvpn » Version: N/A
Fatpipeinc » Ipvpn Firmware » Version: 9.1.2 Update R161p20
cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r161p20:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Ipvpn » Version: N/A
Fatpipeinc » Ipvpn Firmware » Version: 9.1.2 Update R161p26
cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r161p26:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Ipvpn » Version: N/A
Fatpipeinc » Ipvpn Firmware » Version: 9.1.2 Update R161p3
cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r161p3:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Ipvpn » Version: N/A
Fatpipeinc » Ipvpn Firmware » Version: 9.1.2 Update R164
cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r164:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Ipvpn » Version: N/A
Fatpipeinc » Ipvpn Firmware » Version: 9.1.2 Update R164p4
cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r164p4:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Ipvpn » Version: N/A
Fatpipeinc » Ipvpn Firmware » Version: 9.1.2 Update R164p5
cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r164p5:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Ipvpn » Version: N/A
Fatpipeinc » Ipvpn Firmware » Version: 9.1.2 Update R165
cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r165:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Ipvpn » Version: N/A
Fatpipeinc » Ipvpn Firmware » Version: 9.1.2 Update R180p2
cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r180p2:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Ipvpn » Version: N/A
Fatpipeinc » Ipvpn Firmware » Version: 9.1.2 Update R185
cpe:2.3:o:fatpipeinc:ipvpn_firmware:9.1.2:r185:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Ipvpn » Version: N/A
Fatpipeinc » Ipvpn Firmware » Version: 10.1.2 Update R60p10
cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.1.2:r60p10:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Ipvpn » Version: N/A
Fatpipeinc » Ipvpn Firmware » Version: 10.1.2 Update R60p13
cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.1.2:r60p13:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Ipvpn » Version: N/A
Fatpipeinc » Ipvpn Firmware » Version: 10.1.2 Update R60p32
cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.1.2:r60p32:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Ipvpn » Version: N/A
Fatpipeinc » Ipvpn Firmware » Version: 10.1.2 Update R60p35
cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.1.2:r60p35:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Ipvpn » Version: N/A
Fatpipeinc » Ipvpn Firmware » Version: 10.1.2 Update R60p45
cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.1.2:r60p45:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Ipvpn » Version: N/A
Fatpipeinc » Ipvpn Firmware » Version: 10.1.2 Update R60p55
cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.1.2:r60p55:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Ipvpn » Version: N/A
Fatpipeinc » Ipvpn Firmware » Version: 10.1.2 Update R60p58
cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.1.2:r60p58:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Ipvpn » Version: N/A
Fatpipeinc » Ipvpn Firmware » Version: 10.1.2 Update R60p58s1
cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.1.2:r60p58s1:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Ipvpn » Version: N/A
Fatpipeinc » Ipvpn Firmware » Version: 10.1.2 Update R60p65
cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.1.2:r60p65:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Ipvpn » Version: N/A
Fatpipeinc » Ipvpn Firmware » Version: 10.1.2 Update R60p71
cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.1.2:r60p71:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Ipvpn » Version: N/A
Fatpipeinc » Ipvpn Firmware » Version: 10.1.2 Update R60p82
cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.1.2:r60p82:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Ipvpn » Version: N/A
Fatpipeinc » Ipvpn Firmware » Version: 10.2.2 Update R10
cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.2.2:r10:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Ipvpn » Version: N/A
Fatpipeinc » Ipvpn Firmware » Version: 10.2.2 Update R25
cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.2.2:r25:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Ipvpn » Version: N/A
Fatpipeinc » Ipvpn Firmware » Version: 10.2.2 Update R38
cpe:2.3:o:fatpipeinc:ipvpn_firmware:10.2.2:r38:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Ipvpn » Version: N/A
Fatpipeinc » Warp Firmware » Version: 5.2.0 Update R34
cpe:2.3:o:fatpipeinc:warp_firmware:5.2.0:r34:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Warp » Version: N/A
Fatpipeinc » Warp Firmware » Version: 6.1.2 Update R70p26
cpe:2.3:o:fatpipeinc:warp_firmware:6.1.2:r70p26:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Warp » Version: N/A
Fatpipeinc » Warp Firmware » Version: 6.1.2 Update R70p45-m
cpe:2.3:o:fatpipeinc:warp_firmware:6.1.2:r70p45-m:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Warp » Version: N/A
Fatpipeinc » Warp Firmware » Version: 6.1.2 Update R70p75-m
cpe:2.3:o:fatpipeinc:warp_firmware:6.1.2:r70p75-m:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Warp » Version: N/A
Fatpipeinc » Warp Firmware » Version: 7.1.2 Update R39
cpe:2.3:o:fatpipeinc:warp_firmware:7.1.2:r39:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Warp » Version: N/A
Fatpipeinc » Warp Firmware » Version: 9.1.2 Update R129
cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r129:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Warp » Version: N/A
Fatpipeinc » Warp Firmware » Version: 9.1.2 Update R144
cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r144:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Warp » Version: N/A
Fatpipeinc » Warp Firmware » Version: 9.1.2 Update R150
cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r150:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Warp » Version: N/A
Fatpipeinc » Warp Firmware » Version: 9.1.2 Update R156
cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r156:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Warp » Version: N/A
Fatpipeinc » Warp Firmware » Version: 9.1.2 Update R161p12
cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r161p12:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Warp » Version: N/A
Fatpipeinc » Warp Firmware » Version: 9.1.2 Update R161p16
cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r161p16:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Warp » Version: N/A
Fatpipeinc » Warp Firmware » Version: 9.1.2 Update R161p17
cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r161p17:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Warp » Version: N/A
Fatpipeinc » Warp Firmware » Version: 9.1.2 Update R161p2
cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r161p2:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Warp » Version: N/A
Fatpipeinc » Warp Firmware » Version: 9.1.2 Update R161p20
cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r161p20:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Warp » Version: N/A
Fatpipeinc » Warp Firmware » Version: 9.1.2 Update R161p26
cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r161p26:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Warp » Version: N/A
Fatpipeinc » Warp Firmware » Version: 9.1.2 Update R161p3
cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r161p3:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Warp » Version: N/A
Fatpipeinc » Warp Firmware » Version: 9.1.2 Update R164
cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r164:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Warp » Version: N/A
Fatpipeinc » Warp Firmware » Version: 9.1.2 Update R164p4
cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r164p4:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Warp » Version: N/A
Fatpipeinc » Warp Firmware » Version: 9.1.2 Update R164p5
cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r164p5:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Warp » Version: N/A
Fatpipeinc » Warp Firmware » Version: 9.1.2 Update R165
cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r165:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Warp » Version: N/A
Fatpipeinc » Warp Firmware » Version: 9.1.2 Update R180p2
cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r180p2:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Warp » Version: N/A
Fatpipeinc » Warp Firmware » Version: 9.1.2 Update R185
cpe:2.3:o:fatpipeinc:warp_firmware:9.1.2:r185:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Warp » Version: N/A
Fatpipeinc » Warp Firmware » Version: 10.1.2 Update R60p10
cpe:2.3:o:fatpipeinc:warp_firmware:10.1.2:r60p10:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Warp » Version: N/A
Fatpipeinc » Warp Firmware » Version: 10.1.2 Update R60p13
cpe:2.3:o:fatpipeinc:warp_firmware:10.1.2:r60p13:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Warp » Version: N/A
Fatpipeinc » Warp Firmware » Version: 10.1.2 Update R60p32
cpe:2.3:o:fatpipeinc:warp_firmware:10.1.2:r60p32:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Warp » Version: N/A
Fatpipeinc » Warp Firmware » Version: 10.1.2 Update R60p35
cpe:2.3:o:fatpipeinc:warp_firmware:10.1.2:r60p35:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Warp » Version: N/A
Fatpipeinc » Warp Firmware » Version: 10.1.2 Update R60p45
cpe:2.3:o:fatpipeinc:warp_firmware:10.1.2:r60p45:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Warp » Version: N/A
Fatpipeinc » Warp Firmware » Version: 10.1.2 Update R60p55
cpe:2.3:o:fatpipeinc:warp_firmware:10.1.2:r60p55:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Warp » Version: N/A
Fatpipeinc » Warp Firmware » Version: 10.1.2 Update R60p58
cpe:2.3:o:fatpipeinc:warp_firmware:10.1.2:r60p58:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Warp » Version: N/A
Fatpipeinc » Warp Firmware » Version: 10.1.2 Update R60p58s1
cpe:2.3:o:fatpipeinc:warp_firmware:10.1.2:r60p58s1:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Warp » Version: N/A
Fatpipeinc » Warp Firmware » Version: 10.1.2 Update R60p65
cpe:2.3:o:fatpipeinc:warp_firmware:10.1.2:r60p65:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Warp » Version: N/A
Fatpipeinc » Warp Firmware » Version: 10.1.2 Update R60p71
cpe:2.3:o:fatpipeinc:warp_firmware:10.1.2:r60p71:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Warp » Version: N/A
Fatpipeinc » Warp Firmware » Version: 10.1.2 Update R60p82
cpe:2.3:o:fatpipeinc:warp_firmware:10.1.2:r60p82:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Warp » Version: N/A
Fatpipeinc » Warp Firmware » Version: 10.2.2 Update R10
cpe:2.3:o:fatpipeinc:warp_firmware:10.2.2:r10:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Warp » Version: N/A
Fatpipeinc » Warp Firmware » Version: 10.2.2 Update R25
cpe:2.3:o:fatpipeinc:warp_firmware:10.2.2:r25:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Warp » Version: N/A
Fatpipeinc » Warp Firmware » Version: 10.2.2 Update R38
cpe:2.3:o:fatpipeinc:warp_firmware:10.2.2:r38:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Warp » Version: N/A
Fatpipeinc » Mpvpn Firmware » Version: 5.2.0 Update R34
cpe:2.3:o:fatpipeinc:mpvpn_firmware:5.2.0:r34:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Mpvpn » Version: N/A
Fatpipeinc » Mpvpn Firmware » Version: 6.1.2 Update R70p26
cpe:2.3:o:fatpipeinc:mpvpn_firmware:6.1.2:r70p26:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Mpvpn » Version: N/A
Fatpipeinc » Mpvpn Firmware » Version: 6.1.2 Update R70p45-m
cpe:2.3:o:fatpipeinc:mpvpn_firmware:6.1.2:r70p45-m:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Mpvpn » Version: N/A
Fatpipeinc » Mpvpn Firmware » Version: 6.1.2 Update R70p75-m
cpe:2.3:o:fatpipeinc:mpvpn_firmware:6.1.2:r70p75-m:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Mpvpn » Version: N/A
Fatpipeinc » Mpvpn Firmware » Version: 7.1.2 Update R39
cpe:2.3:o:fatpipeinc:mpvpn_firmware:7.1.2:r39:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Mpvpn » Version: N/A
Fatpipeinc » Mpvpn Firmware » Version: 9.1.2 Update R129
cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r129:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Mpvpn » Version: N/A
Fatpipeinc » Mpvpn Firmware » Version: 9.1.2 Update R144
cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r144:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Mpvpn » Version: N/A
Fatpipeinc » Mpvpn Firmware » Version: 9.1.2 Update R150
cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r150:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Mpvpn » Version: N/A
Fatpipeinc » Mpvpn Firmware » Version: 9.1.2 Update R156
cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r156:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Mpvpn » Version: N/A
Fatpipeinc » Mpvpn Firmware » Version: 9.1.2 Update R161p12
cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r161p12:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Mpvpn » Version: N/A
Fatpipeinc » Mpvpn Firmware » Version: 9.1.2 Update R161p16
cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r161p16:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Mpvpn » Version: N/A
Fatpipeinc » Mpvpn Firmware » Version: 9.1.2 Update R161p17
cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r161p17:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Mpvpn » Version: N/A
Fatpipeinc » Mpvpn Firmware » Version: 9.1.2 Update R161p2
cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r161p2:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Mpvpn » Version: N/A
Fatpipeinc » Mpvpn Firmware » Version: 9.1.2 Update R161p20
cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r161p20:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Mpvpn » Version: N/A
Fatpipeinc » Mpvpn Firmware » Version: 9.1.2 Update R161p26
cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r161p26:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Mpvpn » Version: N/A
Fatpipeinc » Mpvpn Firmware » Version: 9.1.2 Update R161p3
cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r161p3:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Mpvpn » Version: N/A
Fatpipeinc » Mpvpn Firmware » Version: 9.1.2 Update R164
cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r164:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Mpvpn » Version: N/A
Fatpipeinc » Mpvpn Firmware » Version: 9.1.2 Update R164p4
cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r164p4:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Mpvpn » Version: N/A
Fatpipeinc » Mpvpn Firmware » Version: 9.1.2 Update R164p5
cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r164p5:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Mpvpn » Version: N/A
Fatpipeinc » Mpvpn Firmware » Version: 9.1.2 Update R165
cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r165:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Mpvpn » Version: N/A
Fatpipeinc » Mpvpn Firmware » Version: 9.1.2 Update R180p2
cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r180p2:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Mpvpn » Version: N/A
Fatpipeinc » Mpvpn Firmware » Version: 9.1.2 Update R185
cpe:2.3:o:fatpipeinc:mpvpn_firmware:9.1.2:r185:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Mpvpn » Version: N/A
Fatpipeinc » Mpvpn Firmware » Version: 10.1.2 Update R60p10
cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.1.2:r60p10:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Mpvpn » Version: N/A
Fatpipeinc » Mpvpn Firmware » Version: 10.1.2 Update R60p13
cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.1.2:r60p13:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Mpvpn » Version: N/A
Fatpipeinc » Mpvpn Firmware » Version: 10.1.2 Update R60p32
cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.1.2:r60p32:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Mpvpn » Version: N/A
Fatpipeinc » Mpvpn Firmware » Version: 10.1.2 Update R60p35
cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.1.2:r60p35:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Mpvpn » Version: N/A
Fatpipeinc » Mpvpn Firmware » Version: 10.1.2 Update R60p45
cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.1.2:r60p45:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Mpvpn » Version: N/A
Fatpipeinc » Mpvpn Firmware » Version: 10.1.2 Update R60p55
cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.1.2:r60p55:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Mpvpn » Version: N/A
Fatpipeinc » Mpvpn Firmware » Version: 10.1.2 Update R60p58
cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.1.2:r60p58:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Mpvpn » Version: N/A
Fatpipeinc » Mpvpn Firmware » Version: 10.1.2 Update R60p58s1
cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.1.2:r60p58s1:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Mpvpn » Version: N/A
Fatpipeinc » Mpvpn Firmware » Version: 10.1.2 Update R60p65
cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.1.2:r60p65:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Mpvpn » Version: N/A
Fatpipeinc » Mpvpn Firmware » Version: 10.1.2 Update R60p71
cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.1.2:r60p71:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Mpvpn » Version: N/A
Fatpipeinc » Mpvpn Firmware » Version: 10.1.2 Update R60p82
cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.1.2:r60p82:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Mpvpn » Version: N/A
Fatpipeinc » Mpvpn Firmware » Version: 10.2.2 Update R10
cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.2.2:r10:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Mpvpn » Version: N/A
Fatpipeinc » Mpvpn Firmware » Version: 10.2.2 Update R25
cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.2.2:r25:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Mpvpn » Version: N/A
Fatpipeinc » Mpvpn Firmware » Version: 10.2.2 Update R38
cpe:2.3:o:fatpipeinc:mpvpn_firmware:10.2.2:r38:*:*:*:*:*:*
Matching versions
When used together with: Fatpipeinc » Mpvpn » Version: N/A

CVE-2021-27860 is in the CISA Known Exploited Vulnerabilities Catalog

CISA vulnerability name:

FatPipe WARP, IPVPN, and MPVPN Configuration Upload exploit

CISA required action:

Apply updates per vendor instructions.

CISA description:

A vulnerability in the web management interface of FatPipe WARP, IPVPN, and MPVPN software allows a remote, unauthenticated attacker to upload a file to any location on the filesystem.

Notes:

https://nvd.nist.gov/vuln/detail/CVE-2021-27860

Added on 2022-01-10 Action due date 2022-01-24

Exploit prediction scoring system (EPSS) score for CVE-2021-27860

EPSS FAQ

28.52%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 97 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2021-27860

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
9.3	HIGH	AV:N/AC:M/Au:N/C:C/I:C/A:C	8.6	10.0	NIST
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete
9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	3.9	5.9	CERT/CC
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High
8.8	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	2.8	5.9	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: Required Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2021-27860

CWE-434 Unrestricted Upload of File with Dangerous Type

The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.
Assigned by:
- cret@cert.org (Secondary)
- nvd@nist.gov (Primary)

References for CVE-2021-27860

https://www.ic3.gov/Media/News/2021/211117-2.pdf

Exploit;Mitigation;Third Party Advisory;US Government Resource
https://www.fatpipeinc.com/support/cve-list.php

Technical Support - FatPipe Networks
Vendor Advisory

CVEs referencing this url

Jump to