Vendor/product archive

fatpipeinc / mpvpn_firmware CVEs

Beta · best-effort

6 CVEs tagged to fatpipeinc / mpvpn_firmware — 2 Critical, 3 High, 1 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to fatpipeinc vendor archive

CVE-2021-27859

Published Dec 15, 2021

A missing authorization vulnerability in the web management interface of FatPipe WARP, IPVPN, and MPVPN software prior to versions 10.1.2r60p91 and 10.2.2r42 allows an authenticat…

CVSS 8.8 · High

Vendor/product tagsBeta · best-effort

CVE-2021-27858

Published Dec 15, 2021

A missing authorization vulnerability in the web management interface of FatPipe WARP, IPVPN, and MPVPN software prior to versions 10.1.2r60p91 and 10.2.2r42 allows a remote attac…

CVSS 5.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2021-27857

Published Dec 15, 2021

A missing authorization vulnerability in the web management interface of FatPipe WARP, IPVPN, and MPVPN software prior to versions 10.1.2r60p91 and 10.2.2r42 allows a remote, unau…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2021-27856

Published Dec 15, 2021

FatPipe WARP, IPVPN, and MPVPN software prior to versions 10.1.2r60p91 and 10.2.2r42 includes an account named "cmuser" that has administrative privileges and no password. Older v…

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

CVE-2021-27855

Published Dec 15, 2021

FatPipe WARP, IPVPN, and MPVPN software prior to versions 10.1.2r60p91 and 10.2.2r42 allows a remote, authenticated attacker with read-only privileges to grant themselves administ…

CVSS 8.8 · High

Vendor/product tagsBeta · best-effort

CVE-2021-27860

Published Dec 8, 2021

A vulnerability in the web management interface of FatPipe WARP, IPVPN, and MPVPN software prior to versions 10.1.2r60p92 and 10.2.2r44p1 allows a remote, unauthenticated attacker…

CVSS 9.8 · Critical

evidence mentions: 2
Buzz score: 42.5

KEV listed

Vendor/product tagsBeta · best-effort

Showing 1-6 of 6 CVEsPage 1 of 1