Design/Logic Flaw

2021-12-1520:15:00

PRIOn knowledge base

www.prio-n.com

9.4 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.4%

JSON

FatPipe WARP, IPVPN, and MPVPN software prior to versions 10.1.2r60p91 and 10.2.2r42 includes an account named “cmuser” that has administrative privileges and no password. Older versions of FatPipe software may also be vulnerable. The FatPipe advisory identifier for this vulnerability is FPSA002.

CPENameOperatorVersion
ipvpn_firmwareeq5.2.0 r34
ipvpn_firmwareeq6.1.2
ipvpn_firmwareeq6.1.2
ipvpn_firmwareeq6.1.2 r70p26
ipvpn_firmwareeq7.1.2 r39
ipvpn_firmwareeq9.1.2 r185
ipvpn_firmwareeq9.1.2 r180p2
ipvpn_firmwareeq9.1.2 r165
ipvpn_firmwareeq9.1.2 r164p5
ipvpn_firmwareeq9.1.2 r164p4

Name	Operator	Version
ipvpn_firmware	eq	5.2.0 r34
ipvpn_firmware	eq	6.1.2
ipvpn_firmware	eq	6.1.2
ipvpn_firmware	eq	6.1.2 r70p26
ipvpn_firmware	eq	7.1.2 r39
ipvpn_firmware	eq	9.1.2 r185
ipvpn_firmware	eq	9.1.2 r180p2
ipvpn_firmware	eq	9.1.2 r165
ipvpn_firmware	eq	9.1.2 r164p5
ipvpn_firmware	eq	9.1.2 r164p4