MF
Product
Mpvpn Firmware
On CISA KEVExploited in the wild
6
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 4Medium 1Low 0
Watch
Add Mpvpn Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-27860 In wildKEV | 8.8 | Dec 8 | Arbitrary file upload vulnerability in FatPipe software Affected: 5.2.0; 6.1.2; 6.1.2; 6.1.2; 7.1.2; 9.1.2; +30 more |
| CVE-2021-27856 | 9.8 | Dec 15 | FatPipe WARP, IPVPN, and MPVPN software prior to versions 10.1.2r60p91 and 10.2.2r42 includes an account named "cmuser" that has administrative privileges and no password Affected: 5.2.0; 6.1.2; 6.1.2; 6.1.2; 7.1.2; 9.1.2; +30 more |
| CVE-2021-27859 | 8.8 | Dec 15 | A missing authorization vulnerability in the web management interface of FatPipe WARP, IPVPN, and MPVPN software prior to versions 10.1.2r60p91 and 10.2.2r42 allows an… Affected: 5.2.0; 6.1.2; 6.1.2; 6.1.2; 7.1.2; 9.1.2; +30 more |
| CVE-2021-27855 | 8.8 | Dec 15 | FatPipe WARP, IPVPN, and MPVPN software prior to versions 10.1.2r60p91 and 10.2.2r42 allows a remote, authenticated attacker with read-only privileges to grant themselves… Affected: 5.2.0; 6.1.2; 6.1.2; 6.1.2; 7.1.2; 9.1.2; +30 more |
| CVE-2021-27857 | 7.5 | Dec 15 | A missing authorization vulnerability in the web management interface of FatPipe WARP, IPVPN, and MPVPN software prior to versions 10.1.2r60p91 and 10.2.2r42 allows a remote,… Affected: 5.2.0; 6.1.2; 6.1.2; 6.1.2; 7.1.2; 9.1.2; +30 more |
| CVE-2021-27858 | 5.3 | Dec 15 | A missing authorization vulnerability in the web management interface of FatPipe WARP, IPVPN, and MPVPN software prior to versions 10.1.2r60p91 and 10.2.2r42 allows a remote… Affected: 5.2.0; 6.1.2; 6.1.2; 6.1.2; 7.1.2; 9.1.2; +30 more |
Showing 6