Lucene search
K

CVE-2021-27855

🗓️ 15 Dec 2021 16:14:47Reported by certccType 
cve
 cve
🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 49 Views🌐 WEB

FatPipe WARP, IPVPN, and MPVPN software allows remote attackers to gain admin privilege

Related
Detection
Affected
Refs
Paths
Social
ReporterTitlePublishedViews
Family
Circl
CVE-2021-27855
5 Jan 202500:00
circl
CNNVD
FatPipe 安全漏洞
15 Dec 202100:00
cnnvd
CNVD
FatPipe WARP, IPVPN and MPVPN have unspecified vulnerabilities (CNVD-2021-101931)
17 Dec 202100:00
cnvd
Cvelist
CVE-2021-27855 FatPipe software allows privilege escalation
15 Dec 202116:14
cvelist
EUVD
EUVD-2021-14593
7 Oct 202500:30
euvd
Tenable Nessus
FatPipe MPVPN < 10.1.2r60p91 / 10.2.2 < 10.2.2r42 Multiple Vulnerabilities
25 May 202300:00
nessus
NVD
CVE-2021-27855
15 Dec 202120:15
nvd
Prion
Design/Logic Flaw
15 Dec 202120:15
prion
Positive Technologies
PT-2021-17639 · Fatpipe · Ipvpn +2
15 Dec 202100:00
ptsecurity
VulnCheck KEV
VulnCheck KEV: CVE-2021-27855
2 Dec 202300:00
vulncheck_kev
Rows per page
NVD
Node
OR
fatpipeincipvpn_firmwareMatch6.1.2r70p26
OR
fatpipeincipvpn_firmwareMatch6.1.2r70p45-m
OR
fatpipeincipvpn_firmwareMatch6.1.2r70p75-m
OROROROROROR
fatpipeincipvpn_firmwareMatch9.1.2r161p12
OR
fatpipeincipvpn_firmwareMatch9.1.2r161p16
OR
fatpipeincipvpn_firmwareMatch9.1.2r161p17
OR
fatpipeincipvpn_firmwareMatch9.1.2r161p2
OR
fatpipeincipvpn_firmwareMatch9.1.2r161p20
OR
fatpipeincipvpn_firmwareMatch9.1.2r161p26
OR
fatpipeincipvpn_firmwareMatch9.1.2r161p3
OROR
fatpipeincipvpn_firmwareMatch9.1.2r164p4
OR
fatpipeincipvpn_firmwareMatch9.1.2r164p5
OROR
fatpipeincipvpn_firmwareMatch9.1.2r180p2
OROR
fatpipeincipvpn_firmwareMatch10.1.2r60p10
OR
fatpipeincipvpn_firmwareMatch10.1.2r60p13
OR
fatpipeincipvpn_firmwareMatch10.1.2r60p32
OR
fatpipeincipvpn_firmwareMatch10.1.2r60p35
OR
fatpipeincipvpn_firmwareMatch10.1.2r60p45
OR
fatpipeincipvpn_firmwareMatch10.1.2r60p55
OR
fatpipeincipvpn_firmwareMatch10.1.2r60p58
OR
fatpipeincipvpn_firmwareMatch10.1.2r60p58s1
OR
fatpipeincipvpn_firmwareMatch10.1.2r60p65
OR
fatpipeincipvpn_firmwareMatch10.1.2r60p71
OR
fatpipeincipvpn_firmwareMatch10.1.2r60p82
OROROR
AND
Node
OR
fatpipeincwarp_firmwareMatch6.1.2r70p26
OR
fatpipeincwarp_firmwareMatch6.1.2r70p45-m
OR
fatpipeincwarp_firmwareMatch6.1.2r70p75-m
OROROROROROR
fatpipeincwarp_firmwareMatch9.1.2r161p12
OR
fatpipeincwarp_firmwareMatch9.1.2r161p16
OR
fatpipeincwarp_firmwareMatch9.1.2r161p17
OR
fatpipeincwarp_firmwareMatch9.1.2r161p2
OR
fatpipeincwarp_firmwareMatch9.1.2r161p20
OR
fatpipeincwarp_firmwareMatch9.1.2r161p26
OR
fatpipeincwarp_firmwareMatch9.1.2r161p3
OROR
fatpipeincwarp_firmwareMatch9.1.2r164p4
OR
fatpipeincwarp_firmwareMatch9.1.2r164p5
OROR
fatpipeincwarp_firmwareMatch9.1.2r180p2
OROR
fatpipeincwarp_firmwareMatch10.1.2r60p10
OR
fatpipeincwarp_firmwareMatch10.1.2r60p13
OR
fatpipeincwarp_firmwareMatch10.1.2r60p32
OR
fatpipeincwarp_firmwareMatch10.1.2r60p35
OR
fatpipeincwarp_firmwareMatch10.1.2r60p45
OR
fatpipeincwarp_firmwareMatch10.1.2r60p55
OR
fatpipeincwarp_firmwareMatch10.1.2r60p58
OR
fatpipeincwarp_firmwareMatch10.1.2r60p58s1
OR
fatpipeincwarp_firmwareMatch10.1.2r60p65
OR
fatpipeincwarp_firmwareMatch10.1.2r60p71
OR
fatpipeincwarp_firmwareMatch10.1.2r60p82
OROROR
AND
Node
OR
fatpipeincmpvpn_firmwareMatch6.1.2r70p26
OR
fatpipeincmpvpn_firmwareMatch6.1.2r70p45-m
OR
fatpipeincmpvpn_firmwareMatch6.1.2r70p75-m
OROROROROROR
fatpipeincmpvpn_firmwareMatch9.1.2r161p12
OR
fatpipeincmpvpn_firmwareMatch9.1.2r161p16
OR
fatpipeincmpvpn_firmwareMatch9.1.2r161p17
OR
fatpipeincmpvpn_firmwareMatch9.1.2r161p2
OR
fatpipeincmpvpn_firmwareMatch9.1.2r161p20
OR
fatpipeincmpvpn_firmwareMatch9.1.2r161p26
OR
fatpipeincmpvpn_firmwareMatch9.1.2r161p3
OROR
fatpipeincmpvpn_firmwareMatch9.1.2r164p4
OR
fatpipeincmpvpn_firmwareMatch9.1.2r164p5
OROR
fatpipeincmpvpn_firmwareMatch9.1.2r180p2
OROR
fatpipeincmpvpn_firmwareMatch10.1.2r60p10
OR
fatpipeincmpvpn_firmwareMatch10.1.2r60p13
OR
fatpipeincmpvpn_firmwareMatch10.1.2r60p32
OR
fatpipeincmpvpn_firmwareMatch10.1.2r60p35
OR
fatpipeincmpvpn_firmwareMatch10.1.2r60p45
OR
fatpipeincmpvpn_firmwareMatch10.1.2r60p55
OR
fatpipeincmpvpn_firmwareMatch10.1.2r60p58
OR
fatpipeincmpvpn_firmwareMatch10.1.2r60p58s1
OR
fatpipeincmpvpn_firmwareMatch10.1.2r60p65
OR
fatpipeincmpvpn_firmwareMatch10.1.2r60p71
OR
fatpipeincmpvpn_firmwareMatch10.1.2r60p82
OROROR
AND
[
  {
    "product": "WARP",
    "vendor": "FatPipe",
    "versions": [
      {
        "lessThan": "10.1.2r60p91",
        "status": "affected",
        "version": "10.1",
        "versionType": "custom"
      },
      {
        "lessThan": "10.2.2r42",
        "status": "affected",
        "version": "10.2",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "IPVPN",
    "vendor": "FatPipe",
    "versions": [
      {
        "lessThan": "10.1.2r60p91",
        "status": "affected",
        "version": "10.1",
        "versionType": "custom"
      },
      {
        "lessThan": "10.2.2r42",
        "status": "affected",
        "version": "10.2",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "MPVPN",
    "vendor": "FatPipe",
    "versions": [
      {
        "lessThan": "10.1.2r60p91",
        "status": "affected",
        "version": "10.1",
        "versionType": "custom"
      },
      {
        "lessThan": "10.2.2r42",
        "status": "affected",
        "version": "10.2",
        "versionType": "custom"
      }
    ]
  }
]
ParameterPositionPathDescriptionCWE
privilegenested/fpui/userServlet?loadType=set&amp;block=userSetRequestPrivilege escalation by setting privilege to 1 in JSON payload to gain ADMINISTRATOR rightsCWE-862

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

21 Nov 2024 05:58Current
8.7High risk
Vulners AI Score8.7
CVSS 26.5
CVSS 3.18.8
EPSS0.00784
49