CVE-2021-27855CWE-862

FatPipe software allows privilege escalation

High · published December 15, 2021

CVSS v3.1
8.8
EPSS
2%
Percentile
76.4
In the wild
Unconfirmed
What it is

FatPipe WARP, IPVPN, and MPVPN software prior to versions 10.1.2r60p91 and 10.2.2r42 allows a remote, authenticated attacker with read-only privileges to grant themselves administrative privileges. Older versions of FatPipe software may also be vulnerable. The FatPipe advisory identifier for this vulnerability is FPSA001.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01657 · 76.4th percentile
Weakness
CWE-862 · Missing Authorization
Published
2021-12-15T16:14Z
EPSS history
Timeline
  • 15 DEC 16:14Z
    FatPipe software allows privilege escalation
    cvelistv5