CVE-2021-27855

FatPipe software allows privilege escalation

State: Published
Severity: 8.8 High
Published: Dec 15, 2021
Updated: Sep 17, 2024
Reserved: Mar 1, 2021

Description

FatPipe WARP, IPVPN, and MPVPN software prior to versions 10.1.2r60p91 and 10.2.2r42 allows a remote, authenticated attacker with read-only privileges to grant themselves administrative privileges. Older versions of FatPipe software may also be vulnerable. The FatPipe advisory identifier for this vulnerability is FPSA001.

Scores

CVSS	Score	Vector	Source
3.1	8.8 High	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	certcc

Weaknesses

CWE-862 Missing Authorization

Affected Products

Product	Versions
WARPFatPipe	10.1 to before 10.1.2r60p91Affected 10.2 to before 10.2.2r42Affected
IPVPNFatPipe	10.1 to before 10.1.2r60p91Affected 10.2 to before 10.2.2r42Affected
MPVPNFatPipe	10.1 to before 10.1.2r60p91Affected 10.2 to before 10.2.2r42Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.