CVE-2021-27857
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2021
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
FatPipe software allows unauthenticated configuration download
A missing authorization vulnerability in the web management interface of FatPipe WARP, IPVPN, and MPVPN software prior to versions 10.1.2r60p91 and 10.2.2r42 allows a remote, unauthenticated attacker to download a configuration archive. The attacker needs to know or correctly guess the hostname of the target system since the hostname is used as part of the configuration archive file name. Older versions of FatPipe software may also be vulnerable. The FatPipe advisory identifier for this vulnerability is FPSA003.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
WARP
- Vendor
- FatPipe
- Product
- WARP
- Platforms
- Unknown
- Default status
Unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 10.1 | affected | custom | 10.1.2r60p91 | Unavailable | None listed |
| 10.2 | affected | custom | 10.2.2r42 | Unavailable | None listed |
IPVPN
- Vendor
- FatPipe
- Product
- IPVPN
- Platforms
- Unknown
- Default status
Unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 10.1 | affected | custom | 10.1.2r60p91 | Unavailable | None listed |
| 10.2 | affected | custom | 10.2.2r42 | Unavailable | None listed |
MPVPN
- Vendor
- FatPipe
- Product
- MPVPN
- Platforms
- Unknown
- Default status
Unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 10.1 | affected | custom | 10.1.2r60p91 | Unavailable | None listed |
| 10.2 | affected | custom | 10.2.2r42 | Unavailable | None listed |