CVE-2021-27857
Summary
| CVE | CVE-2021-27857 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2021-12-15 20:15:00 UTC |
| Updated | 2021-12-21 13:46:00 UTC |
| Description | A missing authorization vulnerability in the web management interface of FatPipe WARP, IPVPN, and MPVPN software prior to versions 10.1.2r60p91 and 10.2.2r42 allows a remote, unauthenticated attacker to download a configuration archive. The attacker needs to know or correctly guess the hostname of the target system since the hostname is used as part of the configuration archive file name. Older versions of FatPipe software may also be vulnerable. The FatPipe advisory identifier for this vulnerability is FPSA003. |
Risk And Classification
Problem Types: CWE-862
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Fatpipeinc | Ipvpn | - | All | All | All |
| Operating System | Fatpipeinc | Ipvpn Firmware | 10.1.2 | r60p10 | All | All |
| Operating System | Fatpipeinc | Ipvpn Firmware | 10.1.2 | r60p13 | All | All |
| Operating System | Fatpipeinc | Ipvpn Firmware | 10.1.2 | r60p32 | All | All |
| Operating System | Fatpipeinc | Ipvpn Firmware | 10.1.2 | r60p35 | All | All |
| Operating System | Fatpipeinc | Ipvpn Firmware | 10.1.2 | r60p45 | All | All |
| Operating System | Fatpipeinc | Ipvpn Firmware | 10.1.2 | r60p55 | All | All |
| Operating System | Fatpipeinc | Ipvpn Firmware | 10.1.2 | r60p58 | All | All |
| Operating System | Fatpipeinc | Ipvpn Firmware | 10.1.2 | r60p58s1 | All | All |
| Operating System | Fatpipeinc | Ipvpn Firmware | 10.1.2 | r60p65 | All | All |
| Operating System | Fatpipeinc | Ipvpn Firmware | 10.1.2 | r60p71 | All | All |
| Operating System | Fatpipeinc | Ipvpn Firmware | 10.1.2 | r60p82 | All | All |
| Operating System | Fatpipeinc | Ipvpn Firmware | 10.2.2 | r10 | All | All |
| Operating System | Fatpipeinc | Ipvpn Firmware | 10.2.2 | r25 | All | All |
| Operating System | Fatpipeinc | Ipvpn Firmware | 10.2.2 | r38 | All | All |
| Operating System | Fatpipeinc | Ipvpn Firmware | 5.2.0 | r34 | All | All |
| Operating System | Fatpipeinc | Ipvpn Firmware | 6.1.2 | r70p26 | All | All |
| Operating System | Fatpipeinc | Ipvpn Firmware | 6.1.2 | r70p45-m | All | All |
| Operating System | Fatpipeinc | Ipvpn Firmware | 6.1.2 | r70p75-m | All | All |
| Operating System | Fatpipeinc | Ipvpn Firmware | 7.1.2 | r39 | All | All |
| Operating System | Fatpipeinc | Ipvpn Firmware | 9.1.2 | r129 | All | All |
| Operating System | Fatpipeinc | Ipvpn Firmware | 9.1.2 | r144 | All | All |
| Operating System | Fatpipeinc | Ipvpn Firmware | 9.1.2 | r150 | All | All |
| Operating System | Fatpipeinc | Ipvpn Firmware | 9.1.2 | r156 | All | All |
| Operating System | Fatpipeinc | Ipvpn Firmware | 9.1.2 | r161p12 | All | All |
| Operating System | Fatpipeinc | Ipvpn Firmware | 9.1.2 | r161p16 | All | All |
| Operating System | Fatpipeinc | Ipvpn Firmware | 9.1.2 | r161p17 | All | All |
| Operating System | Fatpipeinc | Ipvpn Firmware | 9.1.2 | r161p2 | All | All |
| Operating System | Fatpipeinc | Ipvpn Firmware | 9.1.2 | r161p20 | All | All |
| Operating System | Fatpipeinc | Ipvpn Firmware | 9.1.2 | r161p26 | All | All |
| Operating System | Fatpipeinc | Ipvpn Firmware | 9.1.2 | r161p3 | All | All |
| Operating System | Fatpipeinc | Ipvpn Firmware | 9.1.2 | r164 | All | All |
| Operating System | Fatpipeinc | Ipvpn Firmware | 9.1.2 | r164p4 | All | All |
| Operating System | Fatpipeinc | Ipvpn Firmware | 9.1.2 | r164p5 | All | All |
| Operating System | Fatpipeinc | Ipvpn Firmware | 9.1.2 | r165 | All | All |
| Operating System | Fatpipeinc | Ipvpn Firmware | 9.1.2 | r180p2 | All | All |
| Operating System | Fatpipeinc | Ipvpn Firmware | 9.1.2 | r185 | All | All |
| Hardware | Fatpipeinc | Mpvpn | - | All | All | All |
| Operating System | Fatpipeinc | Mpvpn Firmware | 10.1.2 | r60p10 | All | All |
| Operating System | Fatpipeinc | Mpvpn Firmware | 10.1.2 | r60p13 | All | All |
| Operating System | Fatpipeinc | Mpvpn Firmware | 10.1.2 | r60p32 | All | All |
| Operating System | Fatpipeinc | Mpvpn Firmware | 10.1.2 | r60p35 | All | All |
| Operating System | Fatpipeinc | Mpvpn Firmware | 10.1.2 | r60p45 | All | All |
| Operating System | Fatpipeinc | Mpvpn Firmware | 10.1.2 | r60p55 | All | All |
| Operating System | Fatpipeinc | Mpvpn Firmware | 10.1.2 | r60p58 | All | All |
| Operating System | Fatpipeinc | Mpvpn Firmware | 10.1.2 | r60p58s1 | All | All |
| Operating System | Fatpipeinc | Mpvpn Firmware | 10.1.2 | r60p65 | All | All |
| Operating System | Fatpipeinc | Mpvpn Firmware | 10.1.2 | r60p71 | All | All |
| Operating System | Fatpipeinc | Mpvpn Firmware | 10.1.2 | r60p82 | All | All |
| Operating System | Fatpipeinc | Mpvpn Firmware | 10.2.2 | r10 | All | All |
| Operating System | Fatpipeinc | Mpvpn Firmware | 10.2.2 | r25 | All | All |
| Operating System | Fatpipeinc | Mpvpn Firmware | 10.2.2 | r38 | All | All |
| Operating System | Fatpipeinc | Mpvpn Firmware | 5.2.0 | r34 | All | All |
| Operating System | Fatpipeinc | Mpvpn Firmware | 6.1.2 | r70p26 | All | All |
| Operating System | Fatpipeinc | Mpvpn Firmware | 6.1.2 | r70p45-m | All | All |
| Operating System | Fatpipeinc | Mpvpn Firmware | 6.1.2 | r70p75-m | All | All |
| Operating System | Fatpipeinc | Mpvpn Firmware | 7.1.2 | r39 | All | All |
| Operating System | Fatpipeinc | Mpvpn Firmware | 9.1.2 | r129 | All | All |
| Operating System | Fatpipeinc | Mpvpn Firmware | 9.1.2 | r144 | All | All |
| Operating System | Fatpipeinc | Mpvpn Firmware | 9.1.2 | r150 | All | All |
| Operating System | Fatpipeinc | Mpvpn Firmware | 9.1.2 | r156 | All | All |
| Operating System | Fatpipeinc | Mpvpn Firmware | 9.1.2 | r161p12 | All | All |
| Operating System | Fatpipeinc | Mpvpn Firmware | 9.1.2 | r161p16 | All | All |
| Operating System | Fatpipeinc | Mpvpn Firmware | 9.1.2 | r161p17 | All | All |
| Operating System | Fatpipeinc | Mpvpn Firmware | 9.1.2 | r161p2 | All | All |
| Operating System | Fatpipeinc | Mpvpn Firmware | 9.1.2 | r161p20 | All | All |
| Operating System | Fatpipeinc | Mpvpn Firmware | 9.1.2 | r161p26 | All | All |
| Operating System | Fatpipeinc | Mpvpn Firmware | 9.1.2 | r161p3 | All | All |
| Operating System | Fatpipeinc | Mpvpn Firmware | 9.1.2 | r164 | All | All |
| Operating System | Fatpipeinc | Mpvpn Firmware | 9.1.2 | r164p4 | All | All |
| Operating System | Fatpipeinc | Mpvpn Firmware | 9.1.2 | r164p5 | All | All |
| Operating System | Fatpipeinc | Mpvpn Firmware | 9.1.2 | r165 | All | All |
| Operating System | Fatpipeinc | Mpvpn Firmware | 9.1.2 | r180p2 | All | All |
| Operating System | Fatpipeinc | Mpvpn Firmware | 9.1.2 | r185 | All | All |
| Hardware | Fatpipeinc | Warp | - | All | All | All |
| Operating System | Fatpipeinc | Warp Firmware | 10.1.2 | r60p10 | All | All |
| Operating System | Fatpipeinc | Warp Firmware | 10.1.2 | r60p13 | All | All |
| Operating System | Fatpipeinc | Warp Firmware | 10.1.2 | r60p32 | All | All |
| Operating System | Fatpipeinc | Warp Firmware | 10.1.2 | r60p35 | All | All |
| Operating System | Fatpipeinc | Warp Firmware | 10.1.2 | r60p45 | All | All |
| Operating System | Fatpipeinc | Warp Firmware | 10.1.2 | r60p55 | All | All |
| Operating System | Fatpipeinc | Warp Firmware | 10.1.2 | r60p58 | All | All |
| Operating System | Fatpipeinc | Warp Firmware | 10.1.2 | r60p58s1 | All | All |
| Operating System | Fatpipeinc | Warp Firmware | 10.1.2 | r60p65 | All | All |
| Operating System | Fatpipeinc | Warp Firmware | 10.1.2 | r60p71 | All | All |
| Operating System | Fatpipeinc | Warp Firmware | 10.1.2 | r60p82 | All | All |
| Operating System | Fatpipeinc | Warp Firmware | 10.2.2 | r10 | All | All |
| Operating System | Fatpipeinc | Warp Firmware | 10.2.2 | r25 | All | All |
| Operating System | Fatpipeinc | Warp Firmware | 10.2.2 | r38 | All | All |
| Operating System | Fatpipeinc | Warp Firmware | 5.2.0 | r34 | All | All |
| Operating System | Fatpipeinc | Warp Firmware | 6.1.2 | r70p26 | All | All |
| Operating System | Fatpipeinc | Warp Firmware | 6.1.2 | r70p45-m | All | All |
| Operating System | Fatpipeinc | Warp Firmware | 6.1.2 | r70p75-m | All | All |
| Operating System | Fatpipeinc | Warp Firmware | 7.1.2 | r39 | All | All |
| Operating System | Fatpipeinc | Warp Firmware | 9.1.2 | r129 | All | All |
| Operating System | Fatpipeinc | Warp Firmware | 9.1.2 | r144 | All | All |
| Operating System | Fatpipeinc | Warp Firmware | 9.1.2 | r150 | All | All |
| Operating System | Fatpipeinc | Warp Firmware | 9.1.2 | r156 | All | All |
| Operating System | Fatpipeinc | Warp Firmware | 9.1.2 | r161p12 | All | All |
| Operating System | Fatpipeinc | Warp Firmware | 9.1.2 | r161p16 | All | All |
| Operating System | Fatpipeinc | Warp Firmware | 9.1.2 | r161p17 | All | All |
| Operating System | Fatpipeinc | Warp Firmware | 9.1.2 | r161p2 | All | All |
| Operating System | Fatpipeinc | Warp Firmware | 9.1.2 | r161p20 | All | All |
| Operating System | Fatpipeinc | Warp Firmware | 9.1.2 | r161p26 | All | All |
| Operating System | Fatpipeinc | Warp Firmware | 9.1.2 | r161p3 | All | All |
| Operating System | Fatpipeinc | Warp Firmware | 9.1.2 | r164 | All | All |
| Operating System | Fatpipeinc | Warp Firmware | 9.1.2 | r164p4 | All | All |
| Operating System | Fatpipeinc | Warp Firmware | 9.1.2 | r164p5 | All | All |
| Operating System | Fatpipeinc | Warp Firmware | 9.1.2 | r165 | All | All |
| Operating System | Fatpipeinc | Warp Firmware | 9.1.2 | r180p2 | All | All |
| Operating System | Fatpipeinc | Warp Firmware | 9.1.2 | r185 | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Zero Science Lab » FatPipe Networks WARP/IPVPN/MPVPN 10.2.2 Unauthenticated Config Download | MISC | www.zeroscience.mk | |
| Technical Support - FatPipe Networks | CONFIRM | www.fatpipeinc.com | |
| FatPipe MPVPN | Log in | MISC | www.zeroscience.mk | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.